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J.D. Edwards Users 


Push for More 
‘Spending on Apps 


BY MARC L. SONGINI 
| Users of the World ERP appli- 
| cations developed by J.D. Ed- 


wards & Co. are mobilizing to 
lobby new owner PeopleSoft 


| Inc. to keep the aging green- 
| screen software from falling 
| behind the vendor’s other 


| Companies running green-screen software 
| seek increased commitment from PeopleSoft 


installed base. PeopleSoft 
plans to focus most of its J.D. 
Edwards-related development 
on a newer product line that’s 
now called PeopleSoft Enter- 
priseOne. But World Advisory 
Council members are calling 
for the software vendor to 


most are seeing 
only small pav raises and 
flat or declining bonuses. 


Stories begin on page 37. 


products in terms of func- make a larger investment in 

| tionality. the green-screen applications 
The campaign is being so they don’t have to 

launched by members of . A switch to EnterpriseOne 

the World user advisory or other ERP suites. 

panel, which was set up “We're taking this as 
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DNS Servers Prove Resilient 


But core system still 
weak at lower levels 


BY JAIKUMAR VIJAYAN 
In the year since last Octo- 
ber’s high-profile attacks on 
the Internet’s root Domain 
Name System servers, im- 
provements in load distribu- 
tion and processing capacity 


| have made the Internet’s core 
addressing system more re- 
silient. 

But the lack of security at 
lower levels of the DNS stack 


to security experts. And prog- 
ress on a Critical security en- 
hancement designed to add 
data authentication and in- 
tegrity services to the DNS 
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| protocol remains disappoint- 


ingly slow, they added. 
“The state of it all is some- 


apetris, inventor of the DNS 


| and chairman of the board at 
| IP address management ven- 
remains worrisome, according 


dor Nominum Inc. in Red- 
wood City, 
Calif. 

“The root 
server opera- 
tors have cre- 
ated more 
replicated 
copies of the root servers. So 
they are certainly less vulner- 
able to denial-of-service at- 
tacks and the like,” he said. 

Some of the operators have 
also strengthened their sys- 
tems by adding more process- 

DNS Servers, page 14 
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by J.D. Edwards and has 
been continued by Peo- 
pleSoft. It’s the latest 

example of customers banding 


| together to prevent a venera- 


ble technology from fading 


| away — and to save them- 


selves from costly migrations. 


World runs on IBM’s iSeries | 
| systems, formerly known as 
what uneven,” said Paul Mock- | 


the AS/400, and is still used by 
nearly half of the J.D. Edwards 


says Oracle bid 
No aR mst 218) 


an opportunity to [en- 
courage PeopleSoft to] 
take another step and 
make three viable lines in- 
stead of two and a half,” said 
William Gabby, North Ameri- 
can operations manager at 
Cargill Inc.’s Global Financial 
Solutions business unit in 
Minnetonka, Minn. In addition 


| to World and EnterpriseOne, 


PeopleSoft, page 53 


RFID Users Differ on Standards 


| Pentagon insists on 


ISO specs; corporate 
users back EPC plan 


BY BOB BREWIN 

The U.S. Department of De- 
fense wants to leverage radio 
frequency identification tech- 
nology that’s being developed 
for use in commercial supply 
chains. But a Pentagon official 
last week said the RFID tags 
used by the military must con- 


| form to upcoming specifica- 


tions from the International 


| Standards Organization. 


In contrast, Wal-Mart Stores 


| Inc. and other corporate users 


have said they plan to adopt 
an electronic product code 


| standard that’s being devised 


by EPCglobal Inc. 

Some suppliers and analysts 
voiced concerns that the use 
of different standards could 
result in higher costs for com- 

RFID, page 14 
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KeyCorp Wins Mirroring Marathon 


In the Technology section: KeyCorp’s Charlie Miller, 
Bruce Trent and Robert Bellanti say that after more 
than two years, the bank’s data-mirroring system is 
finally up and running and has cut its disaster re- 
covery time from 72 hours to 12 hours. Page 25 
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XML Gets Organized 


Also in the Technology section: XML is becoming the 
standard for describing the data used by multiple 
Web applications. As XML data grows, administra- 
tors can take different approaches to managing it. 

A native XML database is just one option. Page 30 
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Steve Ballmer designates 
application management 
as a top priority for Micro- 
soft and suggests intent to 
acquire XML Web services 
technology. 


IBM is backing a technology 
that uses standards built on 
messaging systems to connect 
disparate applications. 


Storage Networking World: 
Vendors such as Brocade and 
HP plan to push for interoper- 
ability support. 


Veritas intends to port its 
storage tools to SUSE Linux. 


Gartner ITxpo attendees say 
they’re preparing for a poten- 
tial AT&T merger and telecom 
industry consolidation. 


Straight-through processing 
hasn’t been a hit with mutual 
fund companies. 


EDS files to dismiss a share- 
holders’ suit and gets an ex- 

tension for its troubled Navy/ 
Marine Corp Intranet deal... 


... and it extends product 
life-cycle management to the 
Windows desktop. 


Aligning business and IT re- 
quires new ways of thinking, 
conference attendees say. 


Intrusion-prevention prod- 
ucts are gaining in popularity, 
and vendors are taking notice. 


Q&A: Peregrine’s new CEO 
talks about the company’s 
postbankruptcy plans. 


32 Future Watch: Software Bugs 
on the March. Efforts are un- 
der way to improve tools for 
testing and evaluating soft- 
ware. But eliminating defects 
will also take better manage- 
ment of software develop- 
ment and fewer liability pro- 
tections for vendors. 


34 Security Manager’s Journal: 
Hidden Vulnerability Dogs 
VPN Project. An unforeseen 
firewall software defect leaves 
remote users vulnerable, 
keeps a VPN off-line and has 
Vince Tuesday scrambling for 
the right fix. 
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COMPUTERWORLD Economic pressures 
SALARY have put a pinch on IT 
SU compensation again 

this year. While work- 
loads are heavier and 
hours longer, our survey of nearly 
15,000 IT professionals shows 
that most are seeing only small pay 
raises and flat or declining bonus- 
es. STORY BEGINS ON PAGE 37. 
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Our Salary Survey results are pre- 
sented in a three-page chart that 
details compensation information 
for more than 40 IT job titles and 
offers regional, industry and 
company revenue comparisons. 
CHARTS BEGIN ON PAGE 38. 


ONLINE EXCLUSIVE 


Are you being paid what you're 
worth? Use our new Smart 
Salary Tool to compare your 
pay with national results from 
our 2003 Salary Survey. 
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On the Mark: Mark Hall re- 
lates one service provider’s 
despair over spam, spam laws 
and spam suckers. 


20 Maryfran Johnson learns a 


few lessons from this year’s 
salary survey, not the least of 
which is that IT workers are 
anything but whiners. 


20 Pimm Fox thinks good con- 


tent management software 
can be a muse to business suc- 
cess, and he’s found an Ameri- 
can entrepreneur in Paris who 
has proved it. 


Dan Gillmor hails the recent 
profits among chip makers 
and their ongoing competi- 
tion as great news for IT’s 
future hardware investments. 
Unfortunately, there isn’t sim- 
ilar news on the software side. 


35 Tommy Peterson says we 


shouldn’t tolerate software 
bugs — they’re taking too big 
a bite out of the economy. 


54 Frankly Speaking: Frank 


Hayes listens to VeriSign’s 
side of the Site Finder debate 
and argues that the conflict 
will ultimately be fixed only 
when ICANN establishes 
unambiguous rules for man- 
aging the Domain Name 
System. 
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When Outsiders Safeguard 
Your Infrastructure 


SECURITY: Yankee Group security analyst 
Phebe Waterfield offers advice on how to 
successfully implement a managed security 


service. @ 42263 


10 Tips for Managing an 

Offshore Project 

OUTSOURCING: Budget for visits to the off- 
shore location, and communicate, communi- 
cate, communicate to ensure a successful off- 
shore project, says consultant Vijay Guliani. 


© 42150 
Desktop Linux? 


OPERATING SYSTEMS: Yes, Linux is ready 
for corporate desktops, and most users don’t 
need all the features Microsoft offers, argues 
Open Source Development Lab’s Timothy 
Witham. @ 42293 


How to Plan for Application 
Modernization 

DEVELOPMENT: An incremental road map 
lets you get app maintenance out of the way 
so you can focus on new projects. @ 42175 


Delivering the Holy Grail of 
Software Development 


DEVELOPMENT: Companies can increase 
IT productivity by combining models and 
patterns, writes Compuware’s Mike Burba. 


@ 41977 
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What’s a QuickLink? 
Throughout each issue of 
Computerworld, you'll 

see five-digit QuickLink codes 

pointing to related content on 
our Web site. Also, at the end of 
each story, a QuickLink to that 
story online facilitates sharing it 
with colleagues. Just enter any 
of those codes into the Quick- 

Link box, which is at the top of 

every page on our site. 
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Goodyear Restates 
Due to IT Problems 


The Goodyear Tire & Rubber Co. 
said it will restate its financial re- 
sults dating back to 1998 because 
of errors caused by the faulty 
rollout of an accounting system 
based on SAP AG's software, plus 
processing mistakes on older 
billing systems. Akron, Ohio- 
based Goodyear expects to erase 
up to $100 million in profits. The 
company blamed its implementa- 
tion, not the SAP software. SAP 
said it’s working with Goodyear to 
fix the accounting system, which 
was installed in 1999. 


Dynegy Hands IT 
Work to Accenture 


Dynegy Inc., a Houston-based 
electric and gas utility, announced 
a deal to outsource IT infrastruc- 
ture and application management 
services to Accenture Ltd. Finan- 
cial terms weren't disclosed, but 
Dynegy said it expects to save 
“tens of millions of dollars . . . 
over the coming years.” About 
100 Dynegy IT workers will be 
laid off but will be considered for 
new jobs at Accenture. 


IT Spending Slow in 
Q1, Microsoft Says 


Microsoft Corp. reported a profit 
of $2.6 billion on $8.22 billion in 
revenue for its first quarter, which 
ended Sept. 30. But corporate IT 
spending “was slow to improve” 
during the quarter, the company 
said. Microsoft noted that the 
amount of deferred revenue from 
software licensing deals recorded 
on its balance sheet dropped by 
$768 million, more than twice the 
amount it had forecast. 


Short Takes 


MICROSOFT revised two software 
patches in an effort to fix problems 
that affected foreign-language 
versions of Windows and Ex- 
change. . . . NORTEL NETWORKS 
LTD. said it’s restating financial 
results dating back to 2000 to 
lower the losses it reported. 


BY CAROL SLIWA AND 
MATT HAMBLEN 
LAKE BUENA VISTA, FLA 
ICROSOFT CORP. 
CEO Steve Ball- 
mer last week 
said the software 
maker intends to put greater 
emphasis on developing man- 
agement functionality in its 
applications. And to that end, 
| users should “stand by for 
| news” of an acquisition by Mi- 
crosoft in the area of XML 
Web services, he said. 
Ballmer, in a keynote 
interview with Gartner Inc. 
analysts at the Gartner Sym- 


| posium ITxpo 2003 here, 


didn’t elaborate on his acquisi- 
| tion plan. But speculation 

| among industry observers fo- 
cused on the acquisition of a 
Web services management 
vendor, and the one that ap- 

| peared to be at the center of 
the speculation was Amber- 

| Point Inc. in Oakland, Calif. 
Jason Bloomberg, an analyst 





| at ZapThink LLC in Waltham, 


| Mass., said Microsoft has ex- 

| pressed interest in investing in 
| Web services management. He 
said if Microsoft should ac- 


| quire a company in that space, 


it would likely be a vendor 
that is “.Net savvy.” 
Bloomberg noted that Am- 
berPoint and Actional Corp. fall 
into that category, but he said 
he doubts it would be one of 
them. “Microsoft tends to wait 
until a company has achieved 
some level of success,” he said. 
Microsoft said earlier this 
month that it’s working with 
other vendors to ensure that 
-Net-based Web services writ- 
ten for the Windows operating 
system can be managed in a 
heterogeneous environment. 
Microsoft Operations Manager 
management packs for Web 
services from Actional, Am- 
berPoint and Computer Asso- 
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ciates International Inc. will be 
unveiled next week at Micro- 
soft’s Professional Developers 
Conference in Los Angeles. 
David Hamilton, director of 
Microsoft’s enterprise man- 
agement division, said the 
company decided to work 
with those vendors because 
they have good .Net offerings 
and J2EE products. He said he 
has met with many Web ser- 
vices management companies 
in the past 12 months, and only | 
a subset fit into that category. 
“We felt those three compa- 
nies were doing interesting 
things,” Hamilton said. “They 
were excited about what was 
going on, and they actually had 
some customers that had this 
need. None of the Web ser- 
vices management companies | 
have a lot of customers. Most 





Microsoft to Focus 
On App Management 


| Ballmer suggests intent to acquire Web 
services management technology 


4% [Microsoft's goal 

is] to give ourselves 
and our customers the 
tools to design applica- 
tions that are manage- 
able from the get-go. 


STEVE BALLMER, CEO, Microsoft 


of them are less than 50 cus- 
tomers. But Actional and Am- 
berPoint [have more], and we 
thought that would be a great 
chance to work together to try 
some of these things out.” 
Gartner analyst David Smith 
said customers believe Micro- 
soft generally treats manage- 
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ment as an “afterthought” in 
application development. In 
response, Ballmer conceded, 
“It’s always a tricky thing to 
know how to weave together 
an approach to developing 
new applications and manag- 
ing them. And you're right — 
the right way to do it is at the 
same time.” 

Ballmer said Microsoft has 
had a bias to build an applica- 
tion first, which “sometimes 
makes it hard to get the man- 
agement right afterward.” He 
added that Microsoft is “really 
focused ... to give ourselves 
and our customers the tools to 
design applications that are 
manageable from the get-go.” 

Ballmer also conceded that 
Microsoft’s Dynamic Systems 
Initiative, while designed to 
“really focus in on the next 
generation of manageability,” 
is just as much of a marketing 
label as those phrases used by 
competitors. 

“In some senses, that’s what 
all these slogans are; they’re 
great advertisements,” he said. 
“That’s what ‘on demand’ is, 
that’s what ‘adaptive enter- 
prise’ is, that’s what ‘software 
for the agile business’ is,” 


Ballmer said. @ 42325 


Users Welcome Better Management, ‘On Demand’ or Not 


LAKE BUENA VISTA, FLA 

Same puzzler, different place. 
Some users were once again left 
scratching their heads about 
what vendors really mean when 
they talk about “on-demand” 
computing. This time the venue 
was last week’s Gartner Sympo- 
sium ITxpo 2003 here. 

While some users at the event 
said they realize that the on- 
demand strategy loosely refers 
to using management software 
tools to align IT infrastructure 
with business priorities, they 
generally were unable to say 
what's really new other than 
grouping existing management 
tools under a new marketing 
umbrella. 

Others were simply glad to 
see a renewed emphasis on sys- 
tems management. “There's a 
big need, absolutely, for better 
management tools,” said Gary 
Caldwell, general manager of IT 


at Cinergy Corp. in Cincinnati. 
The electricity and gas utility 
uses products from Altiris Inc. in 
Lindon, Utah, for a wide range of 
systems-monitoring and virus- 
protection functions. 

Computer Associates illustrat- 
ed its on-demand story at the 
Gartner event by showcasing a 
customer, International Paper 
Co., that has used CA's Unicen- 
ter management tools for about 
18 months to achieve on-de- 
mand-like benefits. Ben Morris, 
senior manager of enterprise ar- 
chitecture at Stamford, Conn.- 
based International Paper, said 
CA's BrightStor Storage Re- 
source Manager helped the 
company quickly locate 5% 
more storage capacity ina 50TB 
storage infrastructure. 

Another CA tool, Unicenter 
NSM, has made it possible for a 
single IT worker to manage 169 
system components, up from 85 


three years ago, Morris said. And 
with Unicenter ServicePlus Ser- 
vice Desk, system problems 
have been solved faster, with the 
most serious ones getting solved 
first, he said. 

International Paper found that 
implementing on-demand proc- 
esses created cultural chal- 
lenges. Some IT workers have 
been reluctant to relinquish con- 
trol of their systems to automated 
management tools, Morris said. 

Louis Blatt, senior vice presi- 
dent of CA Unicenter, said it's 
common for divisions within 
companies to claim a group of 
servers or other devices as their 
own to run their departmental 
applications. But an on-demand 
strategy requires them to relin- 
quish ownership as applications 
and computing time are shifted 
and shared across an enterprise, 
he said. 

~ Matt Hamblen 
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IBM Plans to Release Enterprise Service Bus 


Move may help 
validate budding 
technology 


BY PATRICK THIBODEAU 
IBM intends to release an 
enterprise service bus (ESB) 
next year, a move likely to 
raise the profile of the rela- 
tively nascent but potentially 
far-reaching integration 
technology. 

In a briefing with Computer- 
world editors last week, John 
Swainson, IBM’s general man- 
ager of application develop- 
ment and integration, said the 
company will deliver “an en- 
terprise-class messaging bus 
that would attach everything 
to everything.” Swainson said 
IBM’s ESB will enable compa- 
nies to put existing messaging 
traffic in an environment that 
allows “every application to 
talk to this bus.” 

ESBs typically use messag- 


ing technology combined with 
a service-oriented architec- 
ture, XML, Web services pro- 
tocols and intelligent routing 
to tie together disparate sys- 
tems. Vendors and analysts 
say it’s a less costly alternative 
to proprietary integration ap- 
proaches, and they expect 
widespread adoption. 


‘Disruptive Technology’ 
Framingham, Mass.-based 
IDC, in a report released in 
March, called ESBs a “disrup- 
tive technology.” And Stam- 
ford, Conn.-based Gartner Inc. 
said it will become a major 
market force. 

Despite rave reviews from 
analysts, ESB adoption re- 
mains low. One integration 
vendor, Tibco Software Inc. 
in Palo Alto, Calif., maintains 
that there isn’t enough cus- 
tomer demand to offer the 


eee reese resesesseesesseeeseees 


Correction 

In the article “Hospitals Back Off 
Cisco LEAP Security for WLANs” 
in last week's issue, a Novell Inc. 
product was misidentified. The 
product's correct name is 
eDirectory. 








technology. And the reason 
for that, said Matt Quinn, 

the company’s chief architect, 
is that an ESR works for low- 
level integration problems 
but won’t help a company 
manage complex business 
processes. 

But ESB vendors Sonic Soft- 
ware Corp. in Bedford, Mass., 
and SpiritSoft Ltd. in Boston 
said IBM’s decision to build an 
ESB will draw attention to a 
technology that remains in the 
very early stages of customer 
adoption. 

IBM validates the market, 
said Robert Davies, chief tech- 
nology officer at SpiritSoft, 
“and that’s good for every- 
body.” 

Another vendor that may 
also be giving credibility to 
the ESB concept is Microsoft 
Corp. At its Professional De- 


What makes it possible: Web 
services and related protocols 
Business value: Cuts integration 


cost by relying on open standards; 
in-house IT staff can do the work. 


haven't agreed on standards for 
underlying architecture. 


velopers Conference in Los 
Angeles this week, Microsoft 
will unveil its “Indigo” pro- 
gramming model. But Gartner 
analyst Roy Schulte said Indi- 
go will include features simi- 
lar to those used in ESBs. 
Those characteristics 
include Web services, the 
equivalent of message-orient- 


ed middleware, simple intelli- 
gent routing and a distributed 
peer-based architecture rather 
than an architecture built 
around a central hub, said 
Schulte. 

Although ESB technology 
is based on open standards, a 
standard is missing that “pulls 
them all together,” said Gor- 
don Van Huizen, chief tech- 
nology officer at Sonic. Van 
Huizen said he expects to see 
several competing implemen- 
tations of ESBs before stan- 
dards agreements are reached. 

The standards issue worries 
one early adopter, Jon John- 
son, chief engineer at defense 
contractor Northrop Grum- 
man Mission Systems in Col- 
orado Springs. Johnson, a Son- 
ic user, said adoption of open 
standards reduces costs be- 
cause it eliminates the need 





Interoperability Push Expected at Storage Conference 


Vendors to showcase products designed 
to let storage devices work together 


BY LUCAS MEARIAN 
At this week’s Storage Net- 
working World Fall 2003 con- 
ference, vendors such as 
Hewlett-Packard Co. and Bro- 
cade Communications Sys- 
tems Inc. plan to unveil tech- 
nology that’s designed to sup- 
port increased interoperability 
between storage devices. 

The conference, which is 
being held in Orlando, will 
also feature dozens of user 
case studies and is expected to 
draw more than 2,500 atten- 
dees. The four-day event is co- 
sponsored by Computerworld 
and the Storage Networking 
Industry Association, a trade 
group in San Francisco. 

Gary Pilafas, senior storage 
and systems architect at UAL 
Loyalty Services Inc. in Ar- 
lington Heights, Ill., said he 
expects to see greater integra- 
tion of products through the 
Storage Management Interface 
Specification, a set of applica- 
tion programming interfaces 
(APD and protocols that let 
storage management tools 


control storage devices made 
by different vendors. 

Pilafas uses storage re- 
source management software 
from CreekPath Systems Inc. 
in Longmont, Colo., to access 
detailed information about the 
storage-area network (SAN) at 
UAL Loyalty Services, a unit 
of United Air Lines Inc. that 
manages its Web site and fre- 
quent-flier programs. “Tools 
like that become more power- 
ful as these companies open 
up their APIs,” Pilafas said. 


SAN Connections 
San Jose-based Brocade will 
announce a Fibre Channel-to- 
Fibre Channel router for con- 
necting separate SANs in- 
stalled across office campuses. 
The router will also give sys- 
tems administrators the ability 
to configure ports for the 
iSCSI and Fibre Channel-over- 
IP protocols, according to 
Dave Stevens, the company’s 
vice president of alliances. 
The 16-port device uses 
Brocade’s proposed Fabric 


Application Interface specifi- 
cation to act as a translator be- 
tween SANs so they can share 
storage and server resources, 
Stevens said. The router is due 
in the first half of 2004. 

In another integration- 
related move, HP plans to an- 
nounce an initiative aimed at 
ensuring interoperability be- 
tween Brocade’s storage 
switches and SAN directors 
and rival devices made by Cis- 
co Systems Inc. and Broom- 
field, Colo.-based McData 
Corp. HP resells products 
from ail three vendors. 

Steve Jerman, a storage 
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for custom interfaces. Conse- 
quently, he can rely on the 
skills of his IT staff rather than 
having to pay consulting fees. 

But Johnson said a failure by 
vendors to agree on a standard 
for the underlying architec- 
ture could lead to proprietary 
protocols, reducing the bene- 
fits of ESBs. 

Sonic and some other ven- 
dors have been working with 
Sun Microsystems Inc. on a 
Java Specification Recommen- 
dation, JSR208, that will be 
used for ESB systems. IBM is 
not part of the effort, but a 
company spokeswoman said 
it’s looking at the JSR and is 
committed to open standards. 

IBM’s ESB will be offered 
along with its messaging plat- 
form MQSeries, but the com- 
pany declined to comment on 


how it will be priced. @ 42341 


management architect at HP’s 
storage software division, said 
the company is running tests 
to ensure that its switch part- 
ners fully conform to the Fibre 
Channel standard. 

By January, HP plans to 
release a set of free design 
rules that will give users a 
step-by-step guide to the con- 
figurations that are needed 
to achieve interoperability 
between Brocade and McData 
switches. Information about 
Cisco’s devices should be 
added shortly after that, 

HP said. 

“What happens is a lot of 

the manufacturers want to put 


| added-value things on their 


switches,” Jerman said. “We’re 
getting those companies to 
follow those standards exact- 


ly.” @ 42329 
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i2’s Revenue 
Continues to Shrink 


Supply chain management soft- 
ware maker i2 Technologies Inc. 
posted a profit for its third quar- 
ter, despite a significant decline 
in revenue. The Dallas-based 
company announced third-quar- 
ter earnings of $7 million on rev- 
enue of $117 million, a drop from 
earnings of $34 million on $374 
million in revenue for the same 
quarter last year. 


CA Has $87M Loss 
CE 
ee 


Computer Associates Interna- 
tional Inc. reported a loss of $87 
million on revenue of $833 mil- 
lion for its second quarter of fis- 
cal 2004. That compares with a 
loss of $52 million on revenue of 
$772 million in the same quarter 
last year. The figures released 
last week reflect $113 million in 
charges to settle litigation. 


IBM Adds Digital 
Content Tool 


IBM has added a version of its 
content management software 
to its Express line of midmarket 
products, offering a tool for man- 
aging digital content such as im- 
age files. DB2 Content Manager 
Express is available for $9,375 
per server and $1,063 per con- 
current user. The product is 
currently available only for Win- 
dows servers. 


Short Takes 


LUCENT TECHNOLOGIES INC. 
reported its first quarterly net 
profit in over three years. . . . 
SUSE LINUX AG unveiled Open- 
exchange Server 4.1, which pro- 
vides messaging and collabora- 
tion support for MICROSOFT 
CORP.’s Outlook. . .. MOTOROLA 
INC. and REALNETWORKS INC. 
signed an agreement that allows 
Motorola to use the RealOne 
Player in some of its phones. 


NEWS 


Spam Splits Service 
Provider Strategy ... 


...in two because Internet service providers and hosted service provid- 
ers must both police and protect users who send or receive the pernicious 
messages. According to Larry Donahue, chief operating officer of curi- 
ously named FatCow in Albuquerque, his Web hosting company not 
only trains the mostly small businesses it serves on how to develop 
spam-resistant sites, it must also detect and eliminate deliberate 
spammers as well as innocent ones. With 25,000 sites under FatCow’s 


wing, so to speak, each averaging 100 
unique e-mail addresses, that’s a daunt- 
ing task. “Spam is the No. 1 issue inside 
our company,” he says. Nearly half of the 
40,000 messages FatCow (also known as 


each hour in its all-Solaris data centers 
are spam. Next month, the company will 
bolster its spam-fighting defenses with 
new filtering technology that Donahue 
hopes will nail 99% of the digital dreck with 
almost no false positives. 
Various antispam laws in 
the works are pointless, he 
claims, and won't hinder 
offshore spammers a bit. 
And as long as dimwits with 
keyboards keep responding to 
spam, it will persist. Worse, 
claims Donahue, who also 
practices law, most of the 
proposed legislation ignores 
due process and fails to give 
carriers or companies like 
his any “safe harbor” provi- 
sions. So Donahue reluc- 
tantly supports a national 
statute, “but only to trump 
the multiple state laws,” he 
says. The only way spam 


Bay Tec 


If you think someone 
might want to peruse your 
data 20 or more years 
hence, consider Encapsu- 
Elem Venue cL ROLE el 
ny toe Teme (A) 
Campbell, Calif. It uses 
XML to embed metadata 
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port for Office 2015. The 
product costs $50,000. 


olo 


can be stopped, he says, is to change the 
Simple Mail Transfer Protocol specifical- 
ly to block spam, something that’s not 
likely to happen. “There’s no hope,” Don- 
ahue laments. ® How much does spam cost 
your company? For a simple calculator, go 
to QuickLink a3760. It will help you justi- 
fy buying filtering technologies, if the 
steady stream of money-sucking missives in 
your CEO’s mailbox hasn’t already done so. 
# The same Internet that brought you 
pricey spam can also save 
you a buck or two. Later 
this week, i2 Telecom In- 
ternational Inc. in Dallas 
ships its EVoIP-4000, a 
four-channel voice-over-IP 
gateway. You can call any- 
one in the world through 
these VoIP-ready gateways 
at competitive rates. Better 
still, you can link far-flung 
offices together, and every- 
one can chat for free. Well, 
almost. The EVoIP-4000 
costs $1,095. # What proba- 
bly costs you more are hap- 
hazardly tested Web-based 
applications. Oh, sure, you 
check the source code for 
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bugs and rigorously review the graphical 
user interface requirements. But how 
about the messaging system they run 
over? That’s where 95% of the failures 
occur. Or so claims Lori Gipp, vice presi- 
dent of marketing at Solstice Software 
Inc. in Wilmington, Del. “And this applies 
to Web services, with an exclamation mark,” 
she exclaims. Solstice estimates that 60% 
of Web services application problems 
stem from message format conflicts and 
that another 20% come from synchro- 
nization problems along a multiprotocol 
route. The rest are specific to a given 
computing environment. Tomorrow, the 
company will introduce Integra Enter- 
prise 4.0, which, among other goodies, 
will include intelligent record and replay. 
This feature lets you quickly simulate an 
application’s path through a complex 
route and record latencies at each protocol 
transaction to identify trouble spots. Pric- 
ing begins at $5,000 per user. # Cobol, PL1 
users take heart. Relativity Technologies 
Inc. in Raleigh, N.C., unveils today its Ap- 
plication Profiler as part of its Modern- 
ization Workbench for mainframe devel- 
opers. The new tool lets nondevelopers, 
such as business analysts, see for them- 


| : 
selves how their proposed changes to 


business policies in one application will 
affect users and other programs. The the- 
ory behind Application Profiler is that 
business folks will bug you less often, freeing 
you to write more bug-free code. You can 
prove or disprove the theory for $1,000 
per seat. ® If you’re a database administra- 
tor forced to manage more than one vendor's 
product, you might look closely at Quest 
Central for Databases 4.0 from Quest 
Software Inc. in Irvine, Calif. The up- 
grade, which ships today for $1,500, lets 
administrators work with Oracle, DB2 
and now Microsoft SQL Server from a 
single console for tasks such as SQL 
statement tuning and creating tables. 

A good idea, no? @ 42320 





Veritas Ports Storage Tools to SUSE Linux 


uses Windows-based Veritas 
software to back up engineer- 





| BY TODD R. WEISS 


Veritas Software Corp. this 
week will announce that it 


| plans to port all of its storage 
| management tools to SUSE 


Linux AG’s version of the 
open-source operating system. 
Mountain View, Calif.-based 
Veritas already offers its appli- 
cations for use on Red Hat 
Inc.’s Linux distribution as 
well as for Windows and ver- 
sions of Unix from Hewlett- 
Packard Co., IBM and Sun Mi- 
crosystems Inc. Ranajit Neva- 
tia, director of Linux strategy 





at Veritas, said support for 
SUSE Linux Enterprise Server 


| 8 is due to be added in January. 


Later next year, the Veritas 
applications will also be read- 
ied for an upcoming Enter- 
prise Server 9 upgrade of the 
operating system, said Uwe 
Heine, chief alliance officer at 


| SUSE in Nuremberg, Ger- 
| many. He added that the two 


companies will work together 
to provide technical support 
and services to users. 

Veritas said users currently 
are beta-testing its software 





on SUSE Linux, but none of 
the testers was available to 
comment about the plans. 
Several other Veritas users 
said the addition of support 
for SUSE’s software won’t af- 
fect their systems. For exam- 
ple, Dong Jin Kim, a senior 
Unix systems administrator 
at Rochester, N-Y.-based East- 
man Kodak Co., said his com- 
pany runs Veritas’ applications 
on Sun Solaris systems. 
Stanley Aviation Corp., an 
Aurora, Colo., maker of aero- 
space couplings and tubing, 





ing workstations running 
IBM’s AIX derivative of Unix. 
Mike Menard, a systems and 
data administrator at Stanley, 
said the company has only a 
single Linux test machine in 
its IT department at this point. 

Al Gillen, an analyst at [DC, 
said the deal with Veritas 
could help SUSE in its battle 
for Linux market share with 
Raleigh, N.C.-based Red Hat. 
“For SUSE to really get in 
there and compete with Red 
Hat, they needed this,” Gillen 
said. @ 42343 
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Potential AT&T Merger 


Puts Customers on 


I'Txpo attendees say they’re preparing 
for possible industry consolidation 





BY MATT HAMBLEN 
LAKE BUENA VISTA, FLA 
OME AT&T CORP. cus- 
tomers are preparing 
themselves in case the 
telecommunications 
company merges with another 
carrier — a possibility that was 
discussed at Gartner Inc.’s 
Symposium/ITxpo 2003 con- 
ference here last week. 

One of the companies keep- 
ing an eye on the merger talk 
is Internap Network Services 
Corp., which provides a na- 
tional overlay backbone net- 
work used by AT&T to sup- 
port its Internet services. At- 
lanta-based Internap has tried 
to insulate itself by providing 


redundancy through the use of 





eight additional network back- 
bones from other carriers, said 
Jeff Hacker, the company’s 
national manager of alliance 


| development. 


“We did that be- 
cause we didn’t 
want all our eggs 
in one basket,” he 
said, citing the 
possibility of con- 
solidation in the 


standards; 


| telecommunications industry. 


Gartner analyst Jay Pultz 
put the odds that AT&T will 
be bought by or merge with 
another carrier during the 
next several years at 40%. The 
potential suitor for AT&T 
that’s mentioned most often is 
BellSouth Corp., Pultz said. 


MORE NEWS 


Former cybersecurity czar 
calls for IT security audit 


@ QuickLink 42236 
www.computerworld.com 


ert 


Declining revenue for 
AT&T and rival vendors has 
created a market that’s ripe for 
consolidation, added Tim 
Smith, another analyst at 
Stamford, Conn.-based Gart- 
ner. For example, AT&T last 
week reported a 9% drop in 
third-quarter rev- 
enue on a year- 
over-year basis 
{QuickLink 42274]. 

Neither AT&T 
nor Atlanta-based 
BellSouth would 
comment on the 
potential for a merger. 

“That AT&T/BellSouth 
merger possibility has come 
up in waves over the past 
three years, but it’s not some- 
thing we talk about,” said Bell- 
South spokesman Todd Smith. 

The Gartner analysts rec- 
ommended that users renego- 


Mutual Fund Companies Not Sold on 
Straight-Through Trade Processing 


Report says investment managers aren't 


convinced of the technology's 


; benefits 





BY LUCAS MEARIAN 

Some mutual fund companies, 
such as Legg Mason Inc., are 
seeing business benefits after 
installing straight-through 
processing (STP) technology. 


But efforts within the financial | 
| ties 


services industry to promote 
widespread adoption of auto- 
mation by investment man- 
agers still face big challenges. 
For example, a report re- 
leased last week by Tower- 
Group in Needham, Mass., 
claims that the campaign to 
sell so-called buy-side firms 
on automated systems that can 
support the seamless flow of 
stock-trading data within and 
between companies has failed. 
STP proponents have neglect- 
ed business objectives while 
extolling the virtues of techni- 


| 
| 


| 





cal integration, the report said. 
For example, backers of the 
technology haven’t done 
enough to show how STP can 
help investment managers 


| provide better customer ser- 


vice and add CRM capabili- 
;, according to TowerGroup 
analyst Timothy Lind. 

STP has become the “Frank- 
enstein’s monster of financial 
acronyms,” Lind said in the 
report. “Maybe it’s time to 
pick up a torch and pitchfork 
and rein in this monster be- 
fore it bores any more vil- 
lagers to death.” 


Why Buy? 

Jane Soybelman, chief technol- 
ogy officer at Asset Manage- 
ment Technology Solutions, 
an IT subsidiary of Baltimore- 





based Legg Mason, agreed 
with the report’s contention 
that the potential benefits 
to mutual fund companies 
haven’t been adequately ex- 
plained. “People need to agree 
on what STP means for every- 
one,” not just for sell-side bro- 
kerages and banks, she said. 
Legg Mason, which man- 
ages about $200 billion worth 
of assets, last year installed 
middleware from New York- 
based Heliograph Inc. to auto- 
mate its back-end trade-clear- 
ance process. It also standard- 
ized on an order management 
system and two messaging for- 
mats — ISO 15022 and the Fi- 
nancial Information Exchange 
— for communicating during 
the post-trade settlement 
process with custodian banks 
that hold stock and bond cer- 
tificates for clients. 
Soybelman said the compa- 
ny has already seen a return 





SOURCE. TOWERGROUP. NEEDHAM. MASS 


tiate their long-term contracts 
with AT&T and other carriers 
to give them more options in 
the event a merger does take 
place. “Customers need to be 
able to say, ‘I don’t like this 
new partner, and I don’t think 
you'll follow your earlier strat- 
egy,” Pultz said. 

Several AT&T customers at 
the conference said privately 
that they fear a merged com- 
pany might move in directions 
that could be adverse to their 
current network plans. 

But Matthew Mitchell, vice 
president of information ser- 
vices at Knowledge Learning 


| Corp. in San Rafael, Calif., said 


he isn’t worried. Knowledge 
Learning, which runs early 
childhood development cen- 
ters in 34 states, recently chose 
AT&T as its principal voice 
and data services provider for 
25,000 workers nationwide. 
Mitchell, who is based in 
Golden, Colo., said he’s alert 
to any news about AT&T but 
added that he thinks the multi- 
million-dollar deal Knowledge 
Learning signed will still be 


on its investment, which was 
under $1 million. She added 
that she expects to save mil- 
lions of dollars over the next 
few years through the contin- 
ued elimination of manual 
processes and a reduction in 
administrative personnel. 

“T definitely try to convince 


my clients [in Legg Mason’s 


business units] that if STP is 
done right on the buy side, it 
can have a great deal of bene- 
fits,” Soybelman said. 


Top 5 Potential 
Applications 


1. Automation of trading desks 
through electronic order routing 


2. Daily reconciliation of cash 
and securities or 
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ae 
actics 


= Don’t give one telecommunica- 
tions carrier all your business. 


® Renegotiate contracts to take 
advantage of favorable prices 
being offered by revenue- 
hungry vendors 


= Play the loyalty card if you're 
already a customer and ask for 
better terms than new users get. 


= Shorten contracts and insist 
on rate caps to limit the poten- 
tial for cost increases while 
they're in effect. 


SOURCES: GARTNER ANALYSTS 
ONFERENCE ATTENDEES 


good even if a merger does 
take place. One reason, he said, 
is that “any merger would take 
two to three years” to fully af- 
fect AT&T’s operations. 
Knowledge Learning chose 
AT&T over other carriers be- 
cause it offers local voice and 
data services that other long- 
distance carriers couldn’t 


match, Mitchell said. @ 42328 


The effort to promote STP 
has mainly been led by the 
New York-based Securities In- 
dustry Association, which ac- 
knowledged that mutual fund 
companies and other invest- 
ment managers lag far behind 
brokerages in adopting STP 
technologies. 

The SIA has set a 2005 tar- 
get date for achieving the key 
objectives of STP, such as 
electronic trade allocation and 
matching (see box). John 
Panchery, managing director 
of the SIA and its STP project 
manager, said that about 80% 
of buy-side firms are stili us- 
ing phones and fax machines 
to relay order information. 

“But as long as we have the 
systems in place [by 2005], the 
business drivers will be able to 
force firms to understand the 
value of automation,” he said. 

Panchery called the Tower- 
Group report a “good con- 
structive comment,” but he 
said that the SIA has made 
considerable strides in work- 
ing with buy-side firms to ed- 
ucate them on the benefits of 
STP. @ 42323 
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Boeing Taps Dell 
For PC Support 


The Boeing Co. awarded Dell Inc. 
a five-year contract to support 
desktop and notebook PCs used 
by Boeing’s Integrated Defense 
Systems business unit. Dell will 
take over responsibility for tasks 
such as systems installation, soft- 
ware distribution and repairs. Dell 
and Chicago-based Boeing de- 
clined to disclose the value of the 
deal or the number of systems 
Dell will manage. 


CSC, Providian Ink 
Outsourcing Deal 


Computer Sciences Corp. an- 
nounced an IT outsourcing deal 
with Providian Financial Corp., a 
credit card company in San Fran- 
cisco. Neither the financial terms 
nor the length of the contract 
were released. El Segundo, Calif.- 
based CSC said it will manage 
Providian’s desktop systems, 
servers and networks, plus its IT 
security and help desk functions. 
About 150 Providian IT workers 
will shift to CSC. 


IBM Adds License 
For DB2 Express 


IBM added an unlimited-user li- 
cense for its DB2 Express data- 
base, which is aimed at small and 
midsize companies. The license 
costs $3,899, compared with 
IBM's regular price of $624 for 
the software plus $124 per end 
user. The move by IBM followed 
Oracle Corp.’s announcement 
earlier this month of an entry- 
level database priced at $5,995 
for an unlimited number of users. 


Short Takes 


SYMANTEC CORP. in Cupertino, 
Calif., said it has acquired SAFE- 
WEB INC., a vendor of virtual pri- 
vate network technology in 
Emeryville, Calif., for $26 million 
in cash. . . . PEOPLESOFT INC. 
said it has teamed with IBM to 
provide software to help financial 
services firms comply with Basel 
ll risk management requirements. 





NEWS 


EDS Files to Dismiss Lawsuit, 
Extends Its N/MCI Funding 


Vows to defend itself against allegations 


| of mishandling $6.9B Navy intranet deal 





| BY DAN VERTON 


AWYERS FOR Electron- 
ic Data Systems Corp. 
last week filed a legal 
motion to dismiss a 
class-action lawsuit by share- 
holders who allege that the 
company committed securi- 
ties fraud and improperly 
handled “problem contracts,” 
including the $6.9 billion 
Navy/Marine Corps Intranet 


| (N/MCD deal. 


A court date to determine 


| whether the case will go for- 


ward has been tentatively set 
for Nov. 10. 

However, Ron Zahn, a certi- 
fied public accountant and 
fraud investigator who’s been 


| retained by the New York law 


firm representing the share- 


| holders, Bernstein Litowitz 


Berger & Grossmann LLP, said 
EDS’s filings with the U.S. Se- 


| curities and Exchange Com- 
| mission show that “they admit 


certain things” regarding the 


| company’s alleged mishan- 


dling of the N/MCI contract 
{QuickLink 39658]. 


Taking Responsibility 

In a 10-K statement filed with 
the SEC in March, EDS ac- 
knowledged, among other 
things, that “material delays 
in the assumption of responsi- 
bility for or installation of 
additional seats under [the 
N/MCI] contract could nega- 
tively impact the financial per- 
formance of this contract and 
significantly reduce our earn- 


| ings and operating cash flow 
| during the quarter in which 


any such delays occur.” 

In addition, EDS acknowl- 
edged that the N/MCI rollout 
schedule on which the compa- 


| ny’s pricing was based has 


been delayed significantly. 
EDS also acknowledged that 
it released the Navy from any 
liability under the contract for 
certain potential claims. 
According to the Plano, 


| Texas-based company’s most 
recent 10-Q quarterly earnings 
report, filed Aug. 13, EDS in- 
tends to defend itself against 
the shareholder lawsuit “vig- 
orously.” That statement also 
noted that the SEC has re- 
quested documents related to 
the N/MCI contract. 

Kevin Lightfoot, a spokes- 
man for EDS, said “nothing 
has changed since last quar- 





ter” regarding the lawsuit and 
the company’s estimates of 
what effect, if any, it might 
have on the future of the 
N/MCI contract. 


Financing Extended 
Meanwhile, EDS last week 
said it’s extending and ex- 
panding the finance vehicle 
associated with the N/MCI 
contract. 

Under the terms of the new 
agreement, EDS’s line of cred- 
it to cover investments in the 
contract has increased from 
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$600 million to $900 million 
and has been extended from 
2005 to 2007. According to 
Lightfoot, the $300 million in- 
crease matches the current 

/MCI equipment deploy- 
ment forecast. 

“This line of credit allows 
us to accelerate our receipt of 
cash by selling future receiv- 
ables to financial institutions 
to match our cash flow,” said 
Lightfoot. This enables EDS to 
get paid immediately for hard- 
ware deployments, even 
though the Navy isn’t contrac- 
tually required to pay for the 
equipment for 60 to 90 days 
after deployment. 

EDS will release its third- 
quarter earnings report on 


Oct. 29. @ 42348 





Product life-cycle 
tools not just for 
engineering 

BY JAIKUMAR VIJAYAN 

Product life-cycle manage- 
ment (PLM) tools — long con- 
fined to use in engineering en- 
vironments — may be slowly 
headed out of their traditional 
niche. 

Last week, Plano, Texas- 
based Electronic Data Systems 
Corp. announced a version of 
its Teamcenter PLM software 
that’s designed for use ina 
standard Windows desktop 
environment. 

The product, dubbed Team- 
center Community, offers a 
range of collaborative capabil- 
ities that give users of Win- 
dows 2000 and later versions 
access to product life-cycle in- 
formation locked up in engi- 
neering systems. 

With it, more people within 
an enterprise, including mar- 
keting and finance teams, as 
well as suppliers and partners, 
will be able to access, visual- 
ize and collaborate around 
product information such as 
computer-aided design mod- 
els and drawings, according to 
the company. 








EDS Extends PLM to 
Windows Desktops 


“What this does is to move 
the world of the engineer clos- 
er to the world of the rest of 
the enterprise,” said Michael 
Burkett, an analyst at Boston- 
based AMR Research Inc. 

Such capabilities can signif- 
icantly reduce the time it takes 
manufacturers to bring new 
products to market, said John 
Loo, senior manager of techni- 
cal computing at Callaway 
Golf Co. in Carlsbad, Calif. 

Callaway has tested the 
product for the past two 
months and is preparing to de- 
ploy it across the company. 

Teamcenter Community 
will enable the sporting goods 
company’s domestic and inter- 


i adele) el ons 


= Extends Microsoft SharePoint 
services with PLM-specific 
functions 
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national suppliers to share 
product data far more effi- 
ciently than is possible with 
current processes, such as fax, 
e-mail and postal mail, accord- 
ing to Loo. 


Common Portal 

With Teamcenter Community, 
suppliers can log into a com- 
mon portal from a Windows 
desktop and access, view and 
comment on product-related 
documents. The tool also of- 
fers some basic routing and 
version-control features that 
will give Callaway more con- 
trol over shared product docu- 
ments, Loo said. 

“One of the biggest con- 
straints when dealing with in- 
ternational suppliers especial- 
ly is just the speed of commu- 
nications,” he said. “This is go- 
ing to help us improve our 
time to market.” 

The move by EDS is similar 
to those of rivals such as IBM, 
Burkett said. But Teamcenter 
Community appears to be 
more tightly integrated with 
the Windows desktop envi- 
ronment than other PLM 
products are, he added. 

“EDS has put the most effort 
in terms of extending it to the 
desktop,” Burkett said. 

Teamcenter Community is 
built around Microsoft Of- 
fice’s SharePoint services and 
will cost companies about 
$250 per user per year. 

@ 42335 
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Corporate Execs Try New Ways | 
To Align IT With Business Units | 


CFOs look to portfolio management, 
other means of handling IT projects 





BY THOMAS HOFFMAN 

CHICAGO 

Although CIOs traditionally 
rank alignment between IT 
and business as a top priority, 
chief financial officers attend- 
ing a conference here last 
week said that closing the gap 
often requires new ways of 
thinking — or new personali- 
ties in management. 

For example, Thomas Will- 
iams, chief process officer at 
AT&T Corp., said poor align- 
ment between the company’s 
IT department and business 


units “was absolutely an issue” 


until AT&T adopted a portfo- 
lio management approach to 





| IT projects in January. 


The new technique, which 
applies the same Buy, Hold or 


| at - as 
| Sell criteria that financial in- 


vestors use, lets AT&T evalu- 
ate whether the more than 100 
IT projects in the pipeline at 
any given time are meeting 
their business objectives, such 


| as reduced costs or improved 


customer satisfaction. 

That has made it easier for 
corporate executives to “make 
conscious decisions on which 
investments to stop and con- 
tinue,” Williams said. It also 
has given AT&T “a regular, re- 
peatable process that has teeth 
to it” for ensuring that IT proj- 


Often, Communication Is a Hurdle 


CHICAGO 

“If there's any barrier to suc- 
cess between IT and business, 
it's communication,” said con- 
ference attendee Randy Mac- 
Donald, executive vice presi- 
dent and CFO at Ameritrade 
Holding Corp. 

And although that statement 
seems like a truism, MacDon- 
ald and two other executives 
who took part in a panel dis- 
cussion noted how difficult it 
can be for ClOs and CFOs to 


“who couldn't talk to total cost 
of ownership or other [finan- 


cial] measurements.” 
Both Cis and CFOs have to 


technology in 
the mark, he added. ithe 


reports to the finance chief, 
“then the CFO had better make 
sure that IT delivers the expect- 
ed results,” MacDonald said. 
Randy Stone, C10 at Tera- 
dyne Inc., said the Boston- 
based maker of semiconductor 
testing equipment makes sure 
its IT workers understand the 
company’s business strategy. 
To help in that effort, Teradyne 
is “reskilling” some IT staffers 
“to get people better at inter- 


ects are aligned with business 
goals, he added. 

Alignment remains a chal- 
lenge at many companies, 


based on comments by confer- 


ence attendees and survey re- 
sults released by Boston-based 
CFO Publishing Corp., which 


| sponsored the event. Twenty- 


two of the 50 chief financial 
officers surveyed cited weak 


| alignment between IT and 


business strategies at their 


| companies, while two others 


| funded by Novell Inc., 


said there’s no alignment at all 
within their organizations. 
The research, which was 
is con- 
sistent with earlier surveys of 
between 200 and 300 CFOs, 
according to Mary Driscoll, 
president and editorial direc- 
tor of CFO Publishing’s events 


| arm. Novell executives dis- 

| cussed the results during a 

| breakfast session and said the 
| findings mapped with chal- 

| lenges being cited by the com- 


‘Vendors Note Demand Shift 


To Intrusion-Prevention Tools 


Should Do 


* Share responsibility for |! pr 


pany’s users. But they didn’t 
pitch the use of Novell’s soft- 
ware to help bridge the gap. 


To help achieve better align- 


ment, Cisco Systems Inc. as- 


| signs an IT and business 


leader to each technology 


| project and makes them joint- 
| ly responsible for the initia- 


tive, said Dennis Powell, the 


| networking vendor’s CFO. 


“We changed our thinking 


| about IT from a cost center to 
a strategic partner,” 


he said. 
Several CFOs said much of 


| the alignment gap is the result 
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| CIOs. 
| agree that the alignment prob- 


B 


of personality conflicts. 

Tom Goldstein, CFO at 
LaSalle Bank Corp. in Chicago, 
said the relationship between 
business units and the bank’s 
IT department “wasn’t that 
great” under its previous CIO. 
But he added that things have 


| improved since current CIO 


Sam Halim joined the compa- 
y. “I trust the guy very much, 
and we share a vision,” Gold- 


| stein said. 


Despite the continuing 


alignment issues, many atten- 


dees were quick to defend 
‘Most CFOs would 


lem isn’t the fault of IT,” said 
Ian Downes, a consultant at 
Cap Gemini Ernst & Young 
U.S. LLC in Rosemont, Ill. “IT 
departments are inundated 
with requests and often find 
themselves in reactive mode.” 

To help guarantee that proj- 
ects are synchronized with 
business needs, Downes rec- 
ommended that IT staffers 
work stints in departments 
such as finance or human re- 
a bet- 
ter understanding of how 


those units work. @ 42353 


sources so they can get 





| BY JAIKUMAR VIJAYAN 


The mixed results that users 


| have had dealing with intru- 

| sion-detection technologies is 
| fueling greater industry inter- 
| est in intrusion-prevention 

| products. 





Last week, Network Associ- 


| ates Inc. announced software 
| designed to help companies 
| not only detect network- and 


system-level attacks, but also 
block them more proactively. 
One of the new products 
from Santa Clara, Calif.-based 
Network Associates is a desk- 


| top version of a server-based 


intrusion-prevention technol- 
ogy that the company ac- 


| quired through its $120 million 


purchase of Entercept Securi- 
ty Technologies in May. 
The product, called McAfee 


| Entercept Desktop, uses a 


combination of virus signa- 
tures and behavioral rules to 





| detect and block attacks at the 
| desktop. Agent software is in- 
| stalled on individual desktops 
| and is centrally managed us- 

| ing McAfee Entercept Man- 

| agement software. 


Also announced was an en- 
hanced version of McAfee 
IntruShield, a network intru- 
sion-prevention product that 


Security Update § 


Network Associates’ new 
intrusion-prevention products: 

McAfee Entercept Desktop, 
for detecting and preventing 


intrusions at the desktop. 
Price: $80 per node 


McAfee IntruShield 1.8, 
an enhanced version of the 
IntruShield network intrusion- 
prevention product. 

Price: not available 


Network Associates obtained 
in its $100 million purchase of 
IntruVert earlier this year. 
Network Associates isn’t 
alone in releasing intrusion- 
prevention wares. Last week, 
Sunnvyvale, Calif.-based 
NetScreen Technologies Inc. 
announced a “deep-inspec- 
| tion” firewall that combines 
signature-, policy- and net- 
work-behavior-based ap- 
proaches to block application- 
| level attacks. And earlier this 
month, Teros Inc. announced 
an enhanced version of its 
host-based intrusion-preven- 
tion product. 
| Unlike intrusion-detection 
products, intrusion-preven- 
| tion tools automatically pre- 
vent unauthorized or mali- 
| cious tasks from executing, 
said Vivek Kundra, former di- 
rector of infrastructure tech- 
nologies for Arlington County, 
Va., an Entercept user. 
“We noticed some clear 
| benefits in having invested in 
IPS when Blaster hit,” Kundra 
said. @ 42346 








id 
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DNS Servers 


ing capacity, said Stephen 
Crocker, head of the security 
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| atechnology approach called 
anycasting, which is similar to 
| mirroring, to set up multiple 


committee at the Internet Cor- | 
| est available server in order to 
| mitigate the effects of denial- 


poration for Assigned Names 
and Numbers in Marina Del 
Rey, Calif. 

But there are some persis- 
tent problems that make the 
security situation “about the 
same or maybe a little bit 
worse as you move down the 
DNS tree,” Mockapetris said. 

All 13 of the Internet’s root 
DNS servers — three of which 
are located outside the U.S. — 
were victims of a massive dis- 
tributed denial-of-service at- 
tack on Oct. 21, 2002 [Quick- 
Link 33890]. 

The attacks did little dam- 
age apart from slowing down 
service in some parts of the 
world. But they were the first 
to target root DNS servers — 
on which everything else on 
the Internet operates — and 
raised concerns that future at- 
tacks could bring down large 
swaths of the Internet. 

Last year’s attacks helped 
raise awareness of the need to 
bolster defenses, said Suzanne 
Woolf, senior program manag- 
er at the Internet Software 
Consortium (ISC) in Redwood 
City, Calif. Like other root 
server operators, the ISC has 
over the past year been using 


Continued from page I 


RFID 


panies that have to meet man- 
dates from both Wal-Mart and 
the DOD to start putting RFID 
tags on shipping pallets and 
cases by January 2005. 

Larry Kellam, director of 
supply network innovation at 
Procter & Gamble Co., said 
there would be “a significant 
cost impact” if the DOD and 
corporate users don’t agree on 
a common standard. IT ex- 
penses would likely increase, 
as would inventory and prod- 
uct-handling costs, he said. 

Kellam added that different 
standards would also make it 
harder to meet a goal of reduc- 
ing the cost of RFID tags to as 


copies of existing servers, 

each with the same IP address. 
Anycasting is designed to 

route DNS queries to the near- 


of-service attacks, explained 


Crocker. 





| 


“Tt lets us spread out our 
vulnerabilities and isolate ar- 
eas as problems arise,” Woolf 
said. 

VeriSign Inc., which oper- 
ates a root server and top-lev- 


| 
el domains such as .com and 


.net, has gone a step further. 
This summer, the company 
moved its DNS infrastructure 
from the widely used Berke- 
ley Internet Name Domain 
DNS server platform to a pro- 
prietary system developed by 
VeriSign called Atlas. The 


| move was driven by the need 


to improve the scalabilty, per- 
formance and security of 


psiepreanire i ~et 


# Adding more elocations. 


@ Adding more processing 
capacity to their servers. 

® Sharing information and 
coordinating response strate- 
Gies with other operators. 


| low as five cents each, the lev- 


| el Wal-Mart wants to see. 


“Tag 


| costs would still never get as 
| low as with a single, global 





standard,” he said. P&G is 
among the top 100 suppliers of 


| both Wal-Mart and the DOD. 


The Pentagon this month 


| said that all of its 23,000-plus 


suppliers will be required to 


| use passive RFID tags to help 


military officials identify and 


| track more than 45 million line 


items [QuickLink 42033]. That 
followed a similar edict issued 
by Bentonville, Ark.-based 
Wal-Mart to its top 100 suppli- 
ers in June. 

The military would like to 


| support the EPC standard, 


said Maurice Stewart, deputy 
chief of the DOD’s Automatic 
Identification Technology of- 


NEWS 


| VeriSign’s DNS services, said 
Ken Silva, vice president of 
network and information se- 


View, Calif. Atlas is designed 
to handle more than 100 bil- 
lion DNS lookups daily and 
to eliminate single points of 
failure. 

In the past year, DNS opera- 
tors and others responsible for 
Internet safety have also made 
more of an effort to share at- 
tack and vulnerability infor- 
mation, Woolf said. 

Just last week, for instance, 
the ISC opened a new Internet 
crisis coordination center 
called the Operations, Analy- 
sis and Research Center. Sev- 
eral top-level domains have 
also begun running multiple 
versions of their software to 
ensure that vulnerabilities in 
one version won't bring down 
service, Mockapetris said. 

But more work remains to 
be done, he added. Because of 
the large number of systems 
involved, top-level domain 
servers aren’t as easy to repli- 
cate using anycasting — and 
therefore remain vulnerable, 
Mockapetris said. Misconfig- 
ured and poorly protected sys- 
tems among top-level domain 
operators also pose a threat, 
he said. 

The Internet Engineering 
Task Force’s work on a formal 
standard and specification for 
| the DNS Security protocol has 





fice. But the Pentagon has 
“embraced ISO standards, be- 


| cause that is the way we do 


business,” Stewart said. He 
added that many of the DOD’s 
suppliers have already adopt- 
ed draft versions of the ISO 
18000 RFID standards and that 
those specifications should 
provide trading partners with 


plug-and-play capabilities. 
a Tag costs 
would still 
never get as low 
as with a single, 
global standard. 
LARRY KELLAM, DIRECTOR OF 


SUPPLY NETWORK INNOVATION, 
PROCTER & GAMBLE 





curity at VeriSign in Mountain 
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DNS Still a Major Target, Creator Says 


Paul Mockapetris in- 

vented the Internet's core 
Domain Name System, a 
highly distributed hierar- 
chical database that pro- 
vides the translation of 

Web names into IP ad- 
dresses, and vice versa. 
Without it, the Internet as 

we know it today wouldn't 
work. In this interview, he dis- 
cusses the state of DNS security. 


Is the DNS safer than it was a 
year ago? It is more robust at 
the top. But the bottom layers 
are a little bit less safe than they 
were a year ago just because the 
attack tools have sort of gotten 
better. The bad guys share their 
attack tools, and the good guys 
haven't bought any new technol- 
ogy to beat them, except at the 
root-server level. 


How are root servers safer to- 
day? There are just many more 
copies of the root servers scat- 
tered around the world. While 
you may be able to do a success- 
ful denial-of-service attack 


also been slow. The extension 
is intended to make it “impos- 
sible to supply inaccurate data 
on the DNS system,” thereby 
eliminating the threat of spoof- 
ing attacks, Crocker said. 


EPCglobal is a joint venture 
between Uniform Code Coun- 


| cil Inc. in Lawrenceville, NJ., 
| and EAN International in 


Brussels. Bernie Hogan, chief 
technology officer at the UCC, 
said he has a hard time under- 
standing why the Pentagon is 
“so hung up” on the differ- 
ences between the two stan- 
dards this early in the RFID 
adoption process. 

Hogan said the standards 


| will likely converge over time, 


with the ISO 18000 specifica- 
tions being incorporated into 
the EPC ones. He added that 
the UCC is heavily involved in 
the development of ISO 18000. 
EPCglobal last month re- 

leased the specifications for an 
RFID-based EPC network and 
supporting technology. The 


| 





against one of the serv- 
ers in Virginia, the other 
ones in the U.S. and oth- 
er countries will continue 
to work. So it’s just much 
more difficult to shut 
down the whole system. 


Why is DNS security 

such a concern? There 
was a cybersecurity report that 
came out of the U.S. govern- 
ment that said the two biggest 
security issues were DNS and 
BGP [Border Gateway Protocol]. 
Part of it is that this is just the 
place where an attacker has the 
most leverage. 


What new technologies are 
being developed to improve 
security? DNSsec [the DNS 
Security protocol] and digital 
signature technologies are ex- 
amples of something that could 
have an impact. Right now, 
there's a bunch of opportunities 
to basically forge data into the 
DNS, and you don’t have any 
particular way to verify it. 

- Jaikumar Vijayan 


Olafur Gudmundsson, 
chairman of the IETF working 
group in charge of the effort, 
said it will take another 12 to 
18 months for a draft standard 
to become available. @ 42344 


EPC standard is much narrow- 
er in scope than the ISO’s and 
doesn’t take into account the 
use of different frequency 
ranges, which the military re- 
quires, said Steve Halliday, an 
analyst at consultancy High 
Tech Aid in Gibsonia, Pa. 

Halliday, who expects a fi- 
nal version of the ISO stan- 
dard to be released in a matter 
of months, said that failing to 
find common ground on the 
issue would have “disastrous” 
consequences for the DOD’s 
suppliers and corporate sup- 
ply chains. @ 42347 


GM’SRFIDPLANS ts 


CTO Anthony Scott expects the auto indus- 
try to adopt the technology within five years: 


QuickLink 42385 
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Peregrine’s New CEO Talks 
About Life After Bankruptcy 


BY MATT HAMBLEN 

John Mutch, who has been CEO 
of San Diego-based Peregrine 
Systems Inc. for just two months, 
is learning fast what it’s like to 
head a company that has re- 
cently emerged from bankrupt- 
cy. He spoke with Computer- 
world last week about what’s 
working and what still needs 
to be fixed. Excerpts from the 
interview follow: 


How do you distinguish Peregrine 
from its competitors? We still 
have a core product advan- 
tage. We have best-of-breed 
[products] in both asset and 
service-center management. 





My sense is that our products 
offer more depth of functional- 
ity and are easier to integrate 
{and] still offer things our com- 
petitors do not. Our partner- 
ships with IBM and EDS and 
our professional services expe- 
rience provide strong value. 


Who are your most formidable 
competitors? Our competitors 
are BMC with its 
Remedy line [ac- 
quired from Pere- 
grine in 2002], and 
we see Computer 
Associates with its 
help desk line. But 
we have strengths 


| 
| 
| 


I'm 
not sure 


we do want 
Remedy back. 


and weaknesses against both. 


Remedy is more of a tool set. 
CA has very strong breadth 
across the entire stack of 
products, but individual com- 
ponents are weak. In an enter- 
prise sale, we typically partner 
with IBM, and in stand-alone 
product sales, we use our pro- 


fessional services to differenti- 
| ate ourselves. 


Would you like to have 
Remedy back? I’m 
not sure we do want 
Remedy back. When 
you consolidate 
back to your core 
value, you have 


the opportunity to do things 
quickly and well. The com- 
plexity that Remedy brought 
to that process was not helpful. 


| What areas still need improve- 


ment? There are several things 


| we need to look at. We are ar- 
| ticulating a very solid product 


road map that extends the val- 


| ue of existing [products] and 


makes them more open and 
extensible, so there’s a whole 
area of delivering on the prod- 
uct leadership and thought 
leadership. 

Another element is pricing. 
Our company needs to be 
more flexible in the way we li- 


| cense our products to cus- 


tomers. Over the course of the 
next 90 to 120 days, you can 


| look for changes we will make 


to the way we license prod- 
ucts that will make it easier 
for customers to do business. 


What do you say to customers 
who are worried about the bank- 
ruptcy? IDC just came out 
with a share-analysis report 
showing a $968 million mar- 
ket in calendar year 2002 
for problem-management 
products and said we were 
No. 1 with Remedy and 

No. 2 in the market without 
Remedy. We also have $50 
million to $60 million in 
unencumbered cash and are 
operating in a cash-flow- 
neutral to cash-flow-positive 
basis. We have new-license 


| growth. We’re not hearing 


that noise level around 
survivability anymore 


@ 42277 


MUTCH MORE 


To read our complete interview with 

Peregrine’s CEO, visit our Web site 
QuickLink 42237 
www.computerworld.com 





If you are a growing enterprise, your need for new 


solutions to fit any size business and any budget. Solutions that can be up and running quickly 


software always exceeds your budget. Or does it? SAP has a range of 


even in a matter of weeks 


(nd since they’re modular and based on an open platform, they can grow and expand as you do. SAP has over 30 years of 


experience helping businesses of all sizes solve business issues. Affordably 


THE BEST-RUN BUSINESSES RUN SAP 


FOR AN OPPORTUNITY TO WIN AN ALL-EXPENSE-PAID TRIP TO A BUSINESS MANAGEMENT 
SEMINAR, LOG ON TO SAP.COM/USA/AFFORDABLE OR CALL 888 592 1727 
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IBM’s Mills Sets Software Sights on Middleware, Linux 


Steve Mills, senior vice president | IBM’s headquarters in Armonk, 
and group executive at IBM, N.Y., Mills met with a group of | soft-related security issues. | $13.6 billion software business is 


| software strategy and Micro- _| You've said that $11 billion of your 
| 
runs the company’s $13.6 billion | Computerworld editors to dis | Excerpts from the discussion middleware. Why the dispropor- 


software business. Last week at | cuss his middleware-centric | follow: tionate focus on middleware? We 


Out-of-the-Box 
Best Practices 


Outside-the-Box 
Thinking 


\ 


Your Business, Your Way. 


You want to think outside the box. 
Your budget calls for “out.of the box” 


Don’t you wish you could have both? 


www.remedy.com/advantage 


www.computerworld.com 


do that because it’s a good 
business — we have share- 
holders to satisfy. Middleware 
has always been important to 
customers. They need to do 
transactions, data manage- 
ment, development tools, sys 
tems management, security, 
collaboration. 

We continue to invest in 
MVS on the mainframe and 
OS/400 for the iSeries plat- 
form. There are investments 
we have to make in support of 
the hardware platforms — the 
operating systems are impor- 
tant. But the bulk of the mon- 
ey goes into mid- 
dleware. And that’s 
where the growth 
comes from. 


How would you char- 

acterize your operat- 

ing system business 

in general and AIX in 

particular? The 

operating system 

business, which is a multi- 
billion-dollar business for us, 
in recent years has essentially 
been a flat business. AIX has 
been a flat business. We’re 
supporting Linux on the 
pSeries today, and I think we'll 
see more and more customers 
over time decide to run the 
pSeries with Linux. 

Linux will run on a variety 
of different chip sets; it cer- 
tainly runs quite nicely on the 
Power chips. In the future, 
we'll see more and more cus- 
tomers run Linux on Power in- 
stead of running AIX on Pow- 
er, and to us that’s fine. AIX 
has always been an enabler. All 
the money in the Unix market 
has been made in hardware, in 
middleware on top of Unix, in 
applications and services on 
top of Unix. But not in Unix 
operating systems — that’s not 
where the payback has been. 


So is it a matter of shifting your 
investment from AIX to Linux? 
We'll continue to invest in 
AIX probably for as long as 
I’m on the planet. More and 
more people, we believe, will 
choose Linux to run on Power 
vs. AIX on Power over time as 
Linux continues to increase in 
maturity and more and more 
things run on Linux on Power. 
Continued on page 19 








As Chief Security Officer‘at Exostar, Jeff Nigriny has a lot on his mind. After all, clients like Rolls-Royce place 


their trust in Exostar’s online collaboration tools. One breach, and years of work, perhaps billions +n assets, might 


SECURITU 
Stem) 


be compromised. But with VeriSign’s Security Intelligence & Control” Services, Nigriny has been freed. Freed 
from worrying about the day to day issues, like tracking intruders and maintaining the firewall. And freed to 


pursue new strategies and product applications leveraging the real-time information 


pe . . 
and response capabilities he now gets from VeriSign. He's probably working on other VeriSign 
tmitiatives as well, bur he didn’t mention them. This guy knows how to keep a secret. The Value of Trust 


> To learn more about VeriSign’s new Security Intelligence and Control” Services, visit www.verisign.com 


2003 VériSign, Inc. All rights reserved, VertSign, the VeriSign logo, Security Sets You Free, Security Intelligence and Control, and other trademarks, Service marks, and logos are registered or 
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Continued from page 16 

So that’s a logical progression 
of usage, and that’s fine with 
us. We'll reach an inflection 
point where it’ll be appropri- 


ate to spend less on AIX to en- | 


able the hardware. 


How much of your attention is 
SCO Group’s lawsuit against IBM 
getting? Obviously, it gets at- 
tention from a variety of peo- 
ple in IBM. 

We haven’t seen any code 
that we have taken from SCO. 
You have to make the pilgrim- 
age to Utah and see this stuff 
under armed guard or some- 
thing. I’m not really sure how 
they do these inspections, 
but we’re not involved in that. 
It’ll all come down to what 
goes to court. 


How are concerns about security 
affecting customer choices on in- 
frastructure and software? The 
accumulated effect of virus at- 
tacks and worms [has] brought 
about a lot of anxiety among 
businesses around the world 
on the porous nature of their 
environment and the cost as- 
sociated with remediating 
these things when they occur. 

Microsoft, for reasons ... of 
their technology, which was 
never designed for this type of 
interconnected, public-facing 
Internet environment, com- 
bined with the fact that they 
are an obvious target, has 
raised all these concerns. 

There are no perfect an- 
swers. Many of the answers 
are procedural in nature, and 
some are technological. 

For example, from a techni- 
cal standpoint, if you have 


Unix systems facing the public | 


Internet, you have the ability 
to dynamically change those 
environments on the fly. Busi- 
nesses that have Unix systems 
facing the public Internet are 
somewhat better off than 
those that have Windows 
server systems. 


Is IBM doing anything at all to 
offer alternatives to the Win- 


MORE MILLS 


To read the full two-part interview with 
Mills, visit our Web site: 


QuickLink 42261 and 42276 
www.computerworld.com 





dows desktop? Thin clients, 


| yes — we have a big portal 


initiative. We recommend to 
customers every day that they 
try to move the maximum 
number of users in their orga- 
nization to a portal-based 


| environment. The lowest 

| number I’ve ever heard for 

| thick-client support is $5,000 
| per user per year — $5,000 


NEWS 


to $12,000 [per year in sup- 


| port costs], that’s kind of the 
| spectrum. The big cost sav- 


ings is not in getting off Mi- 


| crosoft Office and going to 
| StarOffice; the big cost sav- 
| ings is, Can I get to a thin 


client? The cost of the client 


| is tied up in the labor, not in 
| the cost of the client box or 
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the software that runs on it. 
@ 42279 

| This interview was conducted 

| by Patrick Thibodeau, Tommy 
Peterson, Don Tennant and 

| Maryfran Johnson. 
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OPINION 


MARYFRAN JOHNSON 


Down, Not Out 


HE FIRST TIME Computerworld surveyed 
IT professionals about their salaries was 
in 1986, the year Chernobyl melted down, 
the space shuttle Challenger exploded 
and Prince Andrew and Fergie tied the royal knot. 
Lotus 1-2-3 was the No. 1 business software pro- 
gram, and Microsoft was in fifth place among the 


software market leaders 
(IBM, Lotus, Ashton-Tate 
and Apple). There were 
5,000 Internet hosts, vs. 
about 172 million today. 

Seventeen years ago, 
there were only a handful 
of IT job functions and 
titles — computer pro- 
grammer, systems analyst, 
information systems man- 
ager — rather than the 
dozens of specialties in 
the field today. Who could 
have imagined chief secu- 
rity officers, earning six-figure salaries 
no less, or “strategic planning” exper- 
ience becoming a major IT career 
boost? 

The overall number of IT jobs 
tripled from 719,000 in 1983 to 2.5 mil- 
lion in 2000, says the Washington- 
based Commission on Professionals in 
Science and Technology. Yet today the 
IT labor force is down from that peak 
by at least 150,000 jobs, the CPST re- 
ports, and IT unemployment has 
reached an unprecedented high of 6% 
this year [QuickLink 41519]. 

The somber mood among the nearly 
15,000 IT pros and managers in this 
year’s salary survey (see story on page 
37 and online at QuickLink 41785) is 
hardly unexpected, given the flattened 
pay scales, heavier workloads, longer 
hours, outsourcing threats and eco- 
nomic pressures affecting nearly 
everyone. 

What I admire most is the stoic, de- 
termined streak among our survey re- 
spondents, as though someone had 
posted a “No Whining” sign over the 
IT department’s door. “Money isn’t 
the most important thing about a job 
to me,” said a Unix systems adminis- 
trator who was laid off, consulted for a 
while and then found another job. 
“I’m happy to have found a job so 





quickly in this economy.” 

Other IT staffers feel 
deeply uneasy about the 
future, however. “I have 
such a profound sense of 
paranoia,” said one data- 
base developer, “I don’t 
think I'd feel secure if 
the owner came here and 
gave me the keys to the 
building.” 

When it comes to the 
jobs in highest demand, 
companies are still paying 
a premium for IT profes- 

sionals with networking and security 
expertise, and for experience in Mi- 


| crosoft’s .Net technologies. IT archi- 
| tects with strategic planning, resource 
| utilization and business alignment ex- 


perience remain strongly in demand, 
our survey found. Backgrounds in 


| portfolio management, process im- 
| provement, data mining and business 





intelligence have also emerged as rea- 


Loves C'wegLp www. jklossner. com 


| sonably hot tickets in an otherwise 
| tepid marketplace. 


Some of the salary numbers we 


| crunched are intriguing for what they 
| say about company priorities. Like 


the parity achieved between chief se- 
curity officers (average salary: about 
$111,000) and network directors or 
VPs (about $114,000). While CSO 


| salaries were up by about 3.4% over 
| 2002 levels, network chiefs warranted 
| an average pay increase of 6.8%. 


On the flip side, it was dishearten- 


| ing to see job categories where pay 
x = . 
| fell (and probably shouldn’t have). Ex- 


ample: Quality assurance specialists, 
who make just shy of $60,000 on aver- 
age, saw the largest pay decreases 


| (down 5.5%) in the past year. At a time 
when software quality has never been 


a more prominent concern for the en- 
terprise, that job is being devalued? 
Why’s that? 

Finally, for managers worried about 
keeping their best people once the 
economy rebounds, our survey offers 
up some solid data about the most 
desired (nonmonetary) perks. Top- 
ping the list are additional time off 
and telecommuting privileges, fol- 
lowed by comp time and more flexi- 
ble scheduling. 

Remember that whole work/life 
balance mantra? It’s still out there, 
waiting, as we all are, for better times 


to return. @ 42307 


Jill ! 


“ 
THE G00D NEWS 15 WE HAD A RECORD NUMBER OF RESPONSES To 
OUR SALART SURVEY. THE BAD News (S THAT A RECORD NUMBER 
OF PEOPLE HAD THE TIME To RESPOND. ” 
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PIMM FOX 


Parlez Vous 
American 
Business? 


HERE’S SOMETHING 

wonderful (and pow- 

erful) about going to 
Paris and meeting an Ameri- 
can entrepreneur who has 
decided to build simple, inexpensive 
content management software (CMS) 
that helps make visiting French muse- 
ums a rich and energetic experience. 

Here’s how it happened: When one 
of Josh Clark’s best friends perished 
aboard American Airlines Flight ll from 
Boston on Sept. 11, 2001, he rethought 
his life and decided to head to Paris to 
be with his girlfriend, Ellen McBreen, 
who was pursuing her doctorate on the 
sculpture of Henri Matisse. 

But what would he do there? 

Clark had previously built Web sites 
and worked for consulting firms but 
was frustrated by 
overengineered and 
expensive CMS 
products that 
weren't friendly to 
small and midsize 
businesses. 

So he started his 
firm, Global Moxie, 
and built his own 
CMS in his Paris 
apartment using 
Perl. At the same 
time, McBreen, who 
was repeatedly being asked to show 
visiting friends the glories of French 
art, decided to create ParisMuse.com. 
The idea is to offer English-speaking 
museumgoers the chance to connect 
with private guides (graduate students 
with a love and knowledge of art), to 
eliminate the pain and ignorance from 
a trip to the Louvre. 

ParisMuse.com, which started in 
May 2002 with McBreen and one 
other “muse,” became a client of 
Clark’s server-based software, dubbed 
BigMedium.com. With minimal tech- 
nical skills, McBreen (who now has six 
muses and offers multiple museum 
tours) can manage the daily workings 
of her Web site with basic style sheets 
and a variety of components, such as 
e-mail and XML content. “The goal 
is to make Web publishing easy and 
affordable and to give writers con- 


PIMM FOX is a freelanc 
writer in Santa Barbara, 
Calif. Contact him at 
pimmfox@pachell.net. 
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The Battle to Enable Business, 
Control Storage Costs 
and Minimize Risk 


By Jon William Toigo 


Presented with industry statistics that show disk 
media capacity climbing at a rate of about 120% 
per year and price per gigabyte declining at 
approximately 50% per year, many IT managers 
have found themselves pondering the question, 
“Why is data storage the single largest expendi- 


ture in my IT budget?” 


In many cases, they answer the question 
with a cursory survey of their own business 
environment, concluding that their storage 
investment is growing because, simply put, 
there’s more data to store. Confirming this 
assessment are industry statistics quoted in 
the marketing materials and trade press 
commentary arguing that we are in the 
midst of an unprecedented “data explosion.” 
Many point to an ongoing University of 
California at Berkeley study of data growth 
to justify their view. 

The UC Berkeley study, sponsored by EMC 
Corp., achieved notoriety in 2000 by 


announcing that the sum total of all the dig- 


ital data generated by humanity from the 
dawn of the computer era through the 
Millennium would double in 20028. Data vol- 
umes were expressed in tens of “exabytes” 
— beyond our capacity to conceive in any 
concrete way. With such claims about data 
growth, it is little wonder that some IT man- 
agers have concluded the data explosion is 
an irresistible force, a tsunami of informa- 
tion they’re powerless to do anything about. 

The upside of this phenomenon was that 
burgeoning data confirmed the general suc- 
cess of IT efforts to enhance business pro- 
ductivity with automation. The downside: 


like death and taxes, the growth of storage 
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Computerworld Quarterly 
Storage Education Series 


For most companies, storage is the single 
largest expenditure in the IT budget — 
understandable, given both the rate of data 
growth in contemporary businesses and the 
lack of open standards, which impedes 
efforts to develop universal storage man- 
agement and automation technologies that 
can let fewer administrators manage more 
storage capacity efficiently. To attack this 
cost-effectively, a combination of technical 
knowledge, performance engineering and 
business process-centric management is 
required. 

This four-part quarterly series, written 
by Jon William Toigo, independent consult- 
ant and author, will help senior IT manage- 
ment, IT professionals and enterprise busi- 
ness Management cope with the over- 
whelming amount of market informa- 
tion, communication and messaging. 
Equipped with this common-sense method 
for assessing, specifying, testing and 
deploying storage as a blueprint, they can 
then design and implement a truly busi- 
ness-supportive storage architecture for 
their organizations. Armed with a set of 
guidelines, best practices and tools, IT pro- 
fessionals will be able to rise to the chal- 
lenge and derive measurable business 
value from their storage investment. 

Find additional resources at 
Computerworld’s Storage Knowledge Center 
at www.computerworld.com/hardware- 
topics/storage and at www.snia.org, the 
Storage Networking Industry Association’s 
Web site. 


to be paid for all the contributions made to 
the organization by IT. 

IT managers who reach this conclusion 
tend also to curtail any further investigation 
into the root cause of increasing storage 
expense. Since the cause of storage growth 
is beyond their control, they shift their 
efforts toward the discovery of tactics and 
technology to cope with the situation. 
“Managing capacity” has become synony- 
mous with storage management. A popular 
strategy for avoiding the dreaded “Disk Full” 
error message has been to purchase more 
capacity than applications needed. 

A few managers, however, are not satis- 
fied with the pat explanation embodied in 
references to the data explosion. A few have 
actually visited the UC Berkeley Web site 
and discovered that the story of data growth 
cited in brochures is actually a very selec- 
tive reading of the findings. 

For example, according to Berkeley 
researchers, most data growth isn’t attribut- 
able to corporate information systems, but 
rather to personal computing and media 
companies that sell books, movies and music 
on digital media such as CD-ROMs and DVDs. 

While there is doubtless significant 
growth in the volume of data amassed by 
most businesses, especially with the advent 
of the business Internet and e-mail, the 
truth is that this is not the real meaning of 
the data explosion, which the Berkeley 
researchers instead attribute to the “democ- 
ratization of data.” Business data growth is 
a comparatively small subset of data growth 


as a whole, perhaps as little as 20%. 
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Looking deeper 

Some IT managers have probed more 
deeply into the storage cost conundrum. In 
so doing, they have inadvertently joined 
what could be described as a quest for the 
holy grail of business value in storage 
investments. 

Like its predecessors in history and liter- 
ature, this quest is filled with high adven- 
ture, daunting challenges and seemingly 
insurmountable obstacles. (Okay, maybe 
“high adventure” is an exaggeration.) 

The first problem the inquisitive manager 
typically discovers is that he lacks informa- 

tion on real 
Many managers data. growth 
occurring 
within the 
IT infra- 
structure. 
Without 
understand- 
ing the data 
that is cur- 
rently being 
stored or 
the applica- 


tions that 


the organization. 


are generat- 
ing it, it’s impossible to estimate growth 
rates and future capacity requirements. 
More importantly, without understanding 
data access characteristics, retention 
requirements and protection requirements, 
it’s impossible to make optimal use of capac- 
ity. Companies have a tendency to store 


infrequently accessed or modified data on 


their most expensive storage arrays. 

Managers may have some insight into the 
amount of storage they have deployed, and 
perhaps how much raw capacity is current- 
ly available. The meaning of this data is 
unclear, however, and its usefulness in 
describing data growth is limited. 

To support a valid assessment of data 
storage efficiency, managers must consider 
two metrics: capacity allocation efficiency 
and capacity utilization efficiency. The first 
has to do with how efficiently storage capac- 
ity is provisioned to the applications that 
need it. The second metric refers to the opti- 
mal placement of data on platforms in the 
infrastructure based on the access and 
usage characteristics of the data and the 
cost of data storage platforms. 

There is a dearth of software tools 
designed to provide this kind of data on 
data. Unfortunately, data itself does not cur- 
rently carry this information around with it. 
In other words, data is not self-describing 
because operating systems and applications 
have not been created to equip data with a 
self-descriptive header that could be used to 
quickly and effectively describe its storage 


requirements to management applications. 


Rocket science 

In the absence of self-describing data, IT 
managers must sift through stored data 
manually in order to assess its special han- 
dling requirements and growth trends. Once 
this is done, managers must develop tech- 
niques for categorizing data and for subject- 


ing data of different categories to different 
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management policies and processes. 

Unmanaged or poorly managed storage 
capacity is a key factor in the huge labor cost 
component of storage total cost of ownership 
(TCO). Without effective management, the most 
storage a single administrator can handle is 
500 to 700 gigabytes, according to analysts. It 
is substantially greater if the IT manager 
deploys a homogeneous infrastructure — one in 
which all storage components are purchased 
from a single vendor or vendor cadre. 

Usually, this increased administrative capa- 
bility is a function of a set of management util- 
ities that enables the management of multiple 
instances of the vendor’s array products from 
a single console. (In fact, much of the hype 
about the labor savings of Fibre Channel SANs 
derives not from including storage in a Fibre 
Channel fabric, but from building an infra- 
structure using a single vendor’s gear and 
using that vendor’s management console to 
administer the homogeneous platform.) 

For many years, storage hardware vendors 
have used this claim to discourage “promiscu- 
ous purchasing” by companies and to seek 
exclusive deployment of their own equipment. 
Some companies have gone this route in order 
to better control labor costs and the downtime 
that often accompanies unmanaged or poorly 
managed heterogeneous storage (infrastruc- 
tures built using different vendors’ products). 

Of course, homogeneous infrastructure also 
carries the potential drawbacks of vendor lock- 
in. Customers who go this route tend to trade 
off the ability to leverage best-of-breed or inno- 
vative technology not provided by their pre- 
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from competing products may also be sacri- 
ficed at the altar of management efficiency 
through homogeneity. Ultimately, the labor 
cost-savings benefits derived from homo- 
geneity may erode if management utilities 
do not scale as additional storage is deployed 
over time. And many management utilities 


do not scale at all well. 


Hitting the limit 

Historically, even homogeneous storage 
models have hit growth limits. In the late 
1970s, a survey of the GUIDE user group 
reported that systems programmers could 
manage only 11 megabytes of data in an 
IBM mainframe environment, perhaps the 
most homogeneous environment ever field- 
ed. The result so concerned IBM (because it 
suggested that labor costs might inhibit the 
sale of additional direct access storage 
devices, or DASD) that the company initiat- 
ed the development of a technology called 
Systems Managed Storage (SMS), which was 
later productized as DFSMS. The vendor’s 
approach focused on characterizing logical 
and physical storage elements and, with a 
hierarchical management system, migrating 
data through various classes of storage until 
it was either permanently deleted or 
archived to tape and removed from produc- 
tion DASD. 

SMS classes were open-ended, letting cus- 
tomers make determinations about data cat- 
egories that were appropriate for their envi- 
ronment. In shops that fully exploited SMS 
technology, the initial provisioning process 


(the initial allocation of storage and storage- 


' 


related services made to the data generated 


by applications) was simplified. Further 
capabilities provided in IBM’s hierarchical 
storage management (named DFHSM) facili- 
ty enabled the automation of data movement 
from memory to disk and ultimately to tape 
based on access frequency and class descrip- 
tion. The result: a single administrator could 
manage much more storage using SMS. 
These benefits still accrue to homoge- 
neous mainframe-centric storage. Analysts 
say that mainframe DASD in a shop where 
SMS has been fully implemented exhibits 
capacity allocation efficiency between 60% 
and 80% of optimum. That means most of 


the storage 


Inquisitive IT man- 


capacity is 
efficiently 
allocated to 
applications 
on a dynam- 
ic basis. 

By com- 
parison, ana- 
lysts say the 
heteroge- 
neous stor- the infrastructure. 
age in UNIX 
and Windows environments demonstrates a 
poor capacity allocation efficiency of approx- 
imately 40% of optimal, while Linux envi- 
ronments hover at a paltry 30%. The rea- 
sons? First, the heterogeneity of storage 
itself. Also, the lack of an SMS-like manage- 
ment facility in the distributed systems 


world. 


Heterogeneous storage management is 
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inhibited by many factors. One has been the 
lack of ready access to storage devices in 
server-captive or direct-attached configura- 
tions. SANs have targeted this shortcoming 
by connecting the storage behind servers in 
a switched fabric. 

A second inhibitor has been the propri- 
etary architecture of storage arrays them- 
selves. Most redundant array of independ- 
ent disks (RAID) manufacturers have imple- 
mented proprietary small computer system 
interface (SCSI) initialization strings and 
other “features” designed as much to stymie 
interoperability with competitors’ equipment 
as to enhance the performance of their own. 

A third inhibitor has been the lack of 
effective standards for storage in general. 
Where standards have been articulated, such 
as SCSI and Fibre Channel, they’ve often 
been defined so as to help vendors imple- 
ment the letter of the standard and not pro- 
duce interoperable equipment. 

A fourth inhibitor is the relative lack of 
attention that has been dedicated to develop- 
ing management software for distributed 
storage, and the lack of priority placed on 
manageability by those purchasing storage 
hardware. For at least a decade, companies 
expanded storage infrastructure with little 
attention paid to its underlying allocation 
efficiency or labor cost component. “Forklift 
upgrades” were considered far easier than 
figuring out ways to better manage the 
capacity on hand. 

Only as the economy slowed and the “do 
your best with what you have” mantra 


gained urgency was the need for improved 


capacity allocation and utilization efficiency 
underscored. The proliferation of manage- 
ment software developers is a response to 
the newfound awareness of the importance 
of storage management. 

Of course, the storage industry does not 
see the current resurgence of interest in 
storage management through the same eyes 
as IBM in the late 1970s. The need to 
improve capacity management capabilities is 
rarely contextualized by array manufactur- 
ers as a need for a heterogeneous manage- 
ment system, but rather as an opportunity 
to gain mar- 
ket share. TO create data clas- 
Still missing 
is a driving 
force to com- 
pel coopera- 
tion in stor- 


age manage- 


thorough under- 


ment solu- 
tions. standing of the 
Tc date, 
progress 
made by 
industry  greate data. 
associations 
and standards groups has typically occurred 
in response to a credible threat that one 
vendor’s proprietary management software 
product might position it as a de facto leader 
in the industry. When such a threat has 
emerged, other vendors have rallied around 
“open management approaches” such as the 
Common Information Model/Web Based 


Enterprise Management (CIM/WBEM) 
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model. Initiatives are quickly abandoned 
when the threat erodes. 

What is missing from industry dynamics 
is a compelling motive to cooperate in devel- 
oping a universal storage management 
approach. 

There is another potential driver of stor- 
age vendor cooperation, however: operating 
system and database vendors. Microsoft 
Corp. and Oracle Corp., for example, articu- 
lated strategies for replacing file systems in 
favor of object-oriented databases. These 
vendors control or influence the preponder- 
ance of Windows and UNIX operating envi- 
ronments. Ultimately, their requirements 
dictate many of the platform requirements 
CGincluding storage topologies and hardware 
architectures) in the distributed computing 
world. By designating requirements, then 
listing supported hardware configurations, 
these companies could effectively dictate 
which storage products could be used by 
their customers. 

There’s another way Microsoft and Oracle 
could actually facilitate the introduction of a 
system of self-describing data; comparative- 
ly little work would be required to add a 
layer of data classification and data han- 
dling instructions to objects in a database. 
Storage management in the distributed 
world could then become more like data 
management in the mainframe world 
(Figure 1). 

Developing a system of self-describing 
data is one of the prerequisites for the next 
evolution of storage management: data-cen- 


tric management. Current industry discus- 


sion about the topic of information lifecycle 
management alludes to a data-centric man- 
agement model and underscores its impor- 
tance in achieving not only capacity alloca- 
tion efficiency, but also capacity utilization 
efficiency. 

Unfortunately, early architectures 
described by storage vendors tend to be pro- 
prietary in nature; disruptive to implement; 
and limited in their granularity of data clas- 
sifications, level of automation and support 


for equipment not supplied by the vendor. 


Prerequisites 

Truth be told, the creation of a data clas- 
sification or data naming convention is the 
second of three prerequisites for data-cen- 


tric manage- 


So far, most stan- 


ment. The 
first prereq- 
uisite is 
application 
and platform 
knowledge. 
To create 
data classifi- 
cations, you vendor threats. 
must first 
develop a thorough understanding of the 
applications that create data. Data criticali- 
ty, for example, is derived from application 
criticality, so knowing which data needs to 
receive which type of prioritization in a dis- 
aster-recovery situation requires a knowl- 
edge of the application. Application criticali- 
ty will play a large part in determining 


whether the data requires real-time duplica- 
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tion and instantaneous restoration, or 
whether it can be recovered later. 

Applications also determine the retention, 
security and accessibility requirements of 
data. Understanding and documenting these 
requirements can lead to the creation of an 
effective set of policies for provisioning. 

Finally, understanding the purpose of 
applications and their interrelationship with 
each other may help you determine whether 
data is actively used (frequently updated), 
passively used (as a reference that must be 
retained online) or rendered useless over 
time. These characteristics can be classified 
to facilitate both storage resource provision- 
ing and migration over time. 

In addition to application knowledge, you 
must build a knowledge-base of storage 
resources and services, as well as their 
costs. This information helps ensure that 
infrequently changed or accessed data is not 
stored long on your most costly arrays. 

The third and final prerequisite for data- 
centric management is a data movement 
engine. Having defined data classes and stor- 
age classes, some mechanism is required to 
act on the data and move it from platform to 
platform. “Policy” is the buzzword used to 
describe such a mechanism, but policies are 
actually the instructions to the data mover. 

The data movement engine may be simi- 
lar in design to mainframe SMS. Using 
access counts, frequency of data use can be 
collected and, together with the data self- 
description, interpreted by a policy to deter- 
mine whether data migration is appropriate. 


This is not the same as conventional HSM 


software, which moves data from platform 
to platform based on the date it was last 
modified. As the name implies, an access 
frequency-based approach initiates data 
movement based on access frequency and 
other characteristics communicated by the 
data itself as a function of its self-descrip- 
tion method once these inputs are correlat- 
ed by the policy engine. 

The application and platform knowledge- 
base; a data description method; and a poli- 
cy engine and access-frequency based data 
movement engine are key ingredients of 
data-centric management. An effective man- 
agement solution integrates these compo- 


nents to provide automated provisioning and 


Figure 1: An approach to making 
data self-describing 


PVs) aCe ta es 


Save Process 


Route data 
per policy 


Different Storage Platforms 


Source: Toigo Productions 





Special Advertising Supplement 


lifecycle migration of storage. In turn, such 
a system enables real business value to be 
obtained from storage investments. 

Such a system may still be years away — 
or it may be coming soon, given the time- 
frames for the introductions of Microsoft’s 
next-generation Windows client (dubbed 
“Longhorn”), Oracle’s 10G databases and 
other products. However, IT managers who 
are concerned about addressing the root 


causes of storage cost can begin today by: 


don William Toigo, 
Industry Analyst 


Jon William Toigo is CEO and Managing 
Principal of Toigo Partners International 
LLC, an independent consultancy and 
analysis firm focused on providing action- 
able guidance to IT decision makers. He is 
also chairman of the Data Management 
Institute LLC, a professional development 
organization for those who design, plan, 
manage and administer storage infrastruc- 
ture and data assets. 

Toigo is a 20-year IT veteran who has 
worked both as an operative within corpo- 
rate IT departments and as a senior con- 
sultant with two international systems 
integrators. He is also a prolific writer with 
13 books and over 1,000 articles in the 
technology trade press to his credit. His 
technology columns in popular print and 
online media garner a loyal readership of 


over 500,000 per month. 


1. Taking an inventory of applications 
and getting to know the characteristics of 
the data they produce. 

2. Taking an inventory of storage plat- 
forms and available resiliency, security and 
data protection services. 

3. Articulating policies for data manage- 
ment based on the above. 

4. Developing a strategic data manage- 
ment plan and sharing it with preferred ven- 
dors to let them know how you want to 
evolve your infrastructure. 

5. Setting manual policies and best prac- 
tices to guide storage design and platform 
selection — making manageability a prerequi- 
site in product acquisition. 

6. Implementing policies to cull stale and 
contraband data from your infrastructure. 

7. Determining appropriate capacity lim- 
its for business units and formulating serv- 
ice levels appropriate for each application 
and its data. 

8. Formulating and sharing your classifi- 
cation scheme with internal and external 
experts to facilitate its implementation with- 
in an acceptable timeframe. 

9. Implementing a data protection scheme 
today, if you do not already have one. 

10. Educating yourself and your team on 
the latest developments in database object 
systems and creating a change management 
system to stay apprised of new applications 
and changes to existing ones. 

With these 10 steps, you will be well on 
your way to leveraging the capabilities of 
data-centric management as enabling archi- 


tecture and new software tools roll out. * 
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trol over their sites,” says Clark. 

Some of the clients now using 
BigMedium.com include The Salvation 
Army U.K.; Promenades Gourmandes, 


a Paris cooking school; and a short-hop 
airline on the Pacific island of Vanuatu. 


Priced at $129 with unlimited seats and 
unlimited accounts, BigMedium.com 
supports Unicode characters and runs 
on Unix and Linux machines. A Win- 
dows release is planned. The pages 
served up by BigMedium.com aren’t 
dynamic, but as Clark points out, most 
sites don’t need pages to be rebuilt 
from a database each time they’re ac- 
cessed. “The software is meant to be 
gentle on servers,” he says. 

He says he has been able to improve 
his CMS by integrating other Web- 
based technology such as discussion 
forums and payment tools. 

Clark has proved that CMS can be 
effectively molded to solve specific 
business problems at very low cost. 
Now if only it could teach me French. 


@ 42239 


DAN GILLMOR 


Competitors 
Push Intel 
And Help IT 


HERE WAS GOOD 

news for Intel, the 

chip-making giant, 
when it reported excellent 


earnings this month. Then 
Advanced Micro Devices reported 
results that were much better than 
Wall Street had expected. 

The earnings news was, in a sense, 
even better for computer users than 
for high-tech investors. Along with a 
series of recent announcements from 
competitors in the semiconductor 
business, we are seeing signs of a com- 
petitive market in an arena where 
many people have feared Intel might 
gain an outright monopoly. 

The first favorable indicator for cus- 
tomers might be called “the Google 
effect.” This has nothing to do with 
searching the Web, but rather with 
Google Inc.’s own infrastructure. 
Google doesn’t run the latest and 
greatest servers with the latest and 
greatest microprocessors; it uses 
cheap, vanilla boxes with older proces- 
sors in a vast parallel Linux array that 
gives the company an enormous bang 





OPINION 


for the buck. The lessons 
for IT — and the competi- 
tion — are obvious. 

Then there’s AMD’s con- 
tinuing ability to hang in 
there despite the odds. No 


| company has done more to 


push Intel to improve its 
products and moderate its 

prices. Most recently, 

AMD’s 64-bit technology, 
backward-compatible with 

the 32-bit era, looks like a 

smarter decision next to In- 

tel’s less-compatible Itani- 

um. In general, AMD deserves the 
thanks — and some of the business — 
of IT buyers as a result. 

Transmeta and Via Technologies 
remain competitors at the edges, too. 
Their competitive impact has been 
substantially less than Intel’s in terms 
of affecting chip prices. Rather, they 
push Intel’s engineering team. Intel’s 
more efficient processor for mobile 
use stems, at least in part, from Trans- 
meta’s technology initiative of several 
years ago. 

And don’t forget that Sun Micro- 





systems keeps improving 
its Sparc technology and 
that IBM’s PowerPC archi- 
tecture has made huge 
strides (including the GS 
chip that powers Apple’s 
latest and definitely fastest 
computers). 

Intel’s own sensitivity to 
antitrust rules may also 
have played a role. Unlike 
its partner in the Wintel 
alliance, Intel has always 
known where the line is 
drawn between competi- 

tive actions and lawbreaking, and it 
has tended to stay on the right side. 
This isn’t to say that Intel faces seri- 
ous trouble because it’s confronting 
real competitors. Its recent financial 


| results vindicated the company’s deci- 


sion to invest heavily in new chips and 


processes during the worst technology 


recession in anyone’s memory. 
Nor is it to say that Intel has always 
behaved in perfectly ethical ways. A 


| long history of extremely hard-nosed 


tactics has created many enemies and 
detractors. But real markets, even 
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flawed ones, are better than monopolies. 

That lesson, sadly, continues to vex 
IT and other customers on the desktop 
software side of the industry. But even 
with that actual monopoly, some 
cracks may be appearing at the edges. 

Governments, in particular, have 
forced Microsoft to alter its pricing 
policies. In Thailand, it’s selling a Win- 
dows and Office package to a govern- 
ment-sponsored computer initiative for 
an amazing $40. The company offered 
a dramatically lower price to the gov- 
ernment of Munich, Germany, when a 
serious Linux alternative emerged; in 
the end, the city went with Linux. 

This doesn’t offer as much hope as 
it might, given Microsoft’s history and 
its deep pockets. I hope IT depart- 
ments will start using their leverage, 
however tenuous it may be. Mean- 
while, we can thank hardware compe- 
tition for lower prices and the choices 


we do have. @ 42241 


WANT OUR OPINION? 


More columnists and links to archives of previous 
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Offshore Outsourcing Outrage Still Burns 


N THE ARTICLE “Bush Adminis- 

tration Won't Impede Offshore 
Outsourcing” [QuickLink 41662], 
Commerce Department official 
Chris Israel says, “The answer to 
economic challenges is growth and 
innovation.” | would appreciate it if 


Israel would advise me in what field | 


| should have my sons innovate. | 
would like to see them become in- 
novative sometime between now 
and filing bankruptcy for their col- 
lege loans. 

Katherine Handshue 
Pittsburgh 


PROBABLY STAND to the right of 
Rush Limbaugh, but President 
Bush has just lost my vote 
Pete Self 
Senior systems engineer, 
St. Louis 


HEN MANUFACTURING be- 

gan the offshoring process a 
generation or more ago, there was 
anew economic sector ready to re- 
ceive those who had the money 
and initiative to retrain themselves: 
the technology service sector. | 
would ask the Bush administration 
exactly what sector is opening up 


| now to accept all of us who have in- | 


| can join the Army! Now there's a job | 
| that won't get offshored. (Right?) 


| business through the H-1B, L-1 and 
| other job-related visa programs, 

| they are not sitting on the fence as 
| described in your article, but are ac- | 
| tively promoting the loss of jobs. 

| Jim Franz | 
Programmer, Greensboro, N.C. 


_ Offshoring Needn’t | 


vested a lifetime in IT, besides be- 
coming a clerk at Wal-Mart. Oh - | 


Peter Jespersen 
Application integration 
architect, Beaverton, Ore. 


$ LONG AS the president and 
Congress continue to subsidize | 





Be the Only Option 


RANK HAYES delivered solid 
advice for handling application 


| shortcomings [“Ugly Screens,” 
| QuickLink 41543] until the final 


“ship it overseas” zinger. Seeking 


outside assistance need not mean 


immediately going offshore. Com- 
mon sense and recent press indi- 


| cate that executive management 


will eliminate the internal applica- 
tion development team if they even 
think they aren't getting their mon- 
ey’s worth from them. 

Hasty decisions have long-term 
consequences. Permanent losses 
of not just IT jobs will be a hot-but- 
ton issue long after Enron fades 
into memory. Please revisit this is- 
sue in a future column 
Anson Kenley 
Abilene, Texas 


| The Visa Data Isn’t 
| The Real Problem 


HE REAL PROBLEM with the 
GAO's efforts to count H-1Bs 
isn’t the lack of data: it's the lack of 

desire to have any data [“Data 
Problems Thwart Effort to Count 
H-1Bs,” QuickLink 41884]. If the 
government really wanted good 
numbers regarding this program, 
lawmakers would have put some 
teeth into the original legislation 
that required the INS and Labor De- 
partment to properly track H-1B 
and L-1 visa holders. Now, lacking 
good information, it's easier to jus 
tify extending the program. At testi- 
mony last month before the Senate 
Judiciary Committee, advocates of 


the program were brought in to tell 
about how much this program has 
done for U.S. competitiveness. 
Were any American workers who 
have been shoved out of their jobs 
brought in? No! Instead, we heard 
how it’s helping Intel hire semicon- 
ductor physicists. The GAO had the 
opportunity to talk to real Ameri- 
cans who have been displaced by 
H-1B and L-1 visa holders, and they 
declined because they felt that 
these stories were anecdotal. What 
could be more anecdotal than the 
stories that companies have given 
to Congress about why they need 
this program to continue? 

Walter Crosby 


Danvers, Mass. 


COMPUTERWORLD welcomes 
comments from its readers. Letters 
will be edited for brevity and clarity 
They should be addressed to Jamie 
Eckle, letters editor, Computerworld, 
PO Box 9171, 500 Old Connecticut 
Path, Framingham, Mass. 01701 

Fax: (508) 879-4843 

E-mail: letters@computerworld.com 
Include an address and phone num- 


nth 


0 pics, go to 
www.computerworld.com/letters 
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> 10:45 pm. Account Manager Erin Bliss finishes Advanced Linux Volume IX. 
Meanwhile, husband Gary begins XP For Dummies. 
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3 
Software Bugs it a 
On the March 

Efforts are under way to 

improve tools for testing 

and evaluating software. 

But it will take more than 

better bug fixers. Page 32 









Wins Mirroring Marathon 


After two years of stops and starts, the bank’s 
interstate remote data-mirroring project is 
finally online and has cut disaster recovery 
times from 72 hours to 12. By Julia King 


TECHNOLOGY 


‘ 


KeyCorp's data center engineering group: Charlie Miller (left), Bruce Trent (center) and Robert Bellanti nit 


KeyCorp 


| frame production environment, 


SECURITY MANAGER’S JOURNAL 


Hidden Vulnerability 

Dogs VPN Project 

An unforeseen firewall software 
defect leaves remote users in 
Vince Tuesday’s company 
vulnerable — and keeps a VPN 


off-line. Page 34 


| zero loss. That 


Robert Rickert. 
| the same time that 
| an ATM or other 
| transaction comes 
| through, it’s written 
| to our disk [at Key- 
| Corp’s data center 
| in Albany, N-Y.], 





down [at an IBM 


| milliseconds later, 


10.2703 


OPINION 
Send in the Exterminators 


Tommy Peterson says that 
automated development and best 
practices will help, but software 
bugs won't be eliminated until 
users take their bite seriously. 


business in 12 hours 
or less, with near- 


made remote data 
mirroring the only 
ical option. 
nologically, 


KeyCorp 


Cleveland 


cs 


@ Upgrade disaster re- 
covery capabilities to be 
back in business within 12 
hours of a disaster, with near- 
zero data loss. 


® KeyCorp is mirroring 
between 6TB and 8TB of 
data between its data center 
in Albany, N.Y., and an IBM 
facility in Gaithersburg, Md. In 
a test, the bank was able to 
recover its mainframe in un- 
der 12 hours with only milli- 
seconds of data loss. 





and then so many 
it’s written to a disk 


disaster recovery 
facility] in Gaith- 


| ersburg, Md. If something blows up in 


you flip the switch, connect up 
ssor, and you’re ready to go.” 
as Rickert and other KeyCorp of- 
ficials discovered many times through- 
out the project, there can be huge 


| between technical concept and reality. 


For starters, “there were allegations 
— by all of the [bidding] vendors — that 
there were a lot of people doing data 
mirroring, but we had trouble finding 


| people doing even a rudimentary vari- 


“DATA MIRRORING IS LIKE TEENAGE SEX. 





Everybody says they’re doing it, but 
they’re not.” So says Charlie Miller, head | 
of data center engineering at KeyCorp, 
which learned that lesson the hard way 
over the past two and a half years. 

The Cleveland-based bank’s data- 
mirroring odyssey began in the 
fall of 2000 with a seemingly 
straightforward business decision 
to upgrade the disaster recovery 
capabilities for its entire main- 


including its online banking system. At | 
the time, the bank’s best-case data re- 
covery scenario using an in-place tape 
backup system was close to 72 hours, 
with one to three days’ worth of data 
loss. KeyCorp’s goal was to be back in 


| 
| 
| 
BE 
| stable than KeyCorp officials say they 

| were led to believe. On the other hand, 


FID.” ~"Miller says. 
REPORT (XRC) mirroring technology, 


ation of what we were trying to do,” 
says Miller. Plenty of financial services 
companies mirror data between data 


| centers in New York and disaster re- 


covery sites in other parts of Manhat- 
tan or in New Jersey, for instance. “But 
we were trying to go 500 miles, and at 
the time, we had 9TB of data 
and our write I/O was lOOMB 
Miller says. 
IBM’s Extended Remote Copy 


which KeyCorp ultim 
chose to implement over offerings 


| from Hopkinton, M 
| Corp. and Tokyo- 


was also much less mature and less 
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KeyCorp 


Wins Mirroring Marathon 


the bank said it underestimated the un- 
dertaking’s complexity and didn’t take 
full advantage of some resources that 
could have helped during the rollout. 
As a result of those issues and Key- 
Corp’s lack of experience with the new 
storage technology, it took more than 


two years — a year longer than expect- 


ed — to complete the project. 

During that time, KeyCorp suffered 
at least three mainframe crashes and 
reboots, several production-system 
outages, agonizing software-tuning 
problems and a self-imposed project 
“chill period.” KeyCorp then solicited a 
second round of bids from vendors, in- 
cluding IBM, which had won the origi- 
nal contract in part because it had 
agreed to also provide the implemen- 
tation services that KeyCorp needed to 
set up and run the data backup system 

Making matters worse was the fact 
that the project had no return on in- 
vestment. “This was really an insur- 
ance-policy type of project and not a 
project that would result in financial 
savings,” Rickert explains. 

The good news is that today, after 
reaffirming its choice of IBM in a sec- 
ond round of bidding, KeyCorp is in 
full production with a new backup sys- 
tem consisting of IBM Shark DASD 
(direct-access storage device) disk 
drives with XRC mirroring technology 
at both the bank’s data center and 
IBM’s disaster recovery facility. Five 
dedicated OC3 lines link the two sites, 
with KeyCorp mirroring between 6TB 
and 8TB of data — the equivalent of 
millions of transactions per day. 

The bank ran a disaster drill last 
summer to test the system and was able 
to recover its mainframe environment 
in under 12 hours with “milliseconds of 
data loss,” says Rickert. KeyCorp has 
set a data-mirroring delay threshold of 
five minutes for the Gaithersburg site. 
After that, the mirroring system must 
suspend cleanly and write data to a dif- 
ferent backup system rather than slow 
down and stall the mainframe produc- 
tion environment. 


Key Problems 
But getting to this point wasn’t at all 
easy, according to everyone involved 


with the project. KeyCorp encountered | 


several thorny problems along the way, 
but the IT team was able to solve them. 
KeyCorp’s tape backup system was 
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Fits and Starts 


KeyCorp’s remote-mirroring 
project timeline 


@ SEPTEMBER: KeyCorp puts out a re- 
quest for proposals for a data-mirroring 
system to replace its tape backup system. 
EMC, IBM and Hitachi respond. 


@ APRIL: KeyCorp selects IBM's XRC 
data-mirroring technology. 


@ DECEMBER: Original project com- 
pletion date passes as synchronization 
problems keep the remote-mirroring sys- 
tem off-line. A revised completion date 
is set for March. 


@ MARCH: KeyCorp misses the revised 
project completion date. 


@ APRIL: System is ready for testing. 
The initial disaster recovery test succeeds, 
but the system continues to suspend as a 
result of software and hardware tuning 
problems. Discouraged, KeyCorp imposes 
a project “chill period” and solicits a new 
round of bids from vendors. 


@ JUNE: KeyCorp again selects IBM, 
which brings in a new, dedicated project 
manager who completes an audit and 
analysis of the system. 


@ NOVEMBER: Revised project comple- 
tion date slips again. 


@ JANUARY: Data mirroring system 
finally goes live. 


set up to restore critical applications, 
such as core accounting systems, on a 
priority basis in the event of a disaster. 
Back-office systems were secondary. 
But with the advent of online banking 
and other real-time, Internet-based 
transactions, “applications we thought 
were less critical had feeds into the 
more critical applications,” says Rob 
Bellanti, vice president of data center 
engineering. Yet mirroring all of the 
data would be expensive and slow 
down the entire system. 

KeyCorp solved the problem by con- 
figuring the XRC mirroring software 
based on data set characteristics. Data 
files characterized as temporary work 
files and report files, for instance, are 
excluded from mirroring. 

Synchronizing the IBM DASD drives 
in Albany and Gaithersburg was a ma- 
jor problem. The data files to be writ- 
ten in Gaithersburg would back up in 





the queue, accumulating in a 16GB 
cache system at the IBM facility. This 
triggered KeyCorp’s production sys- 
tem in Albany to slow down and crash, 
forcing an initial program load — the 
mainframe equivalent of a reboot. 

“That’s a pretty serious event when 
you have to take down your main- 
frame, essentially hitting Control-Alt- 
Delete,” Rickert says. “We'd have to 
break the mirror for a while when tun- 
ing [of the XRC software] would be 
done. We’d revert to tape when the 
mirror was broken. We never stopped 
doing tape backups, because we want- 
ed to have at least six months where 
this thing worked perfectly before we'd 
give up doing tape backups.” 


The Right Choice 

In April 2002, KeyCorp conducted the 
first test of its mirrored environment, 
which confirmed that it had selected 
the right technology. “It was the first 
time our line-of-business and applica- 
tions groups were able to access mir- 
rored data to make sure it looked like 
the data at home [in Albany] looked, 
and it did,” Trent says. “The test actu- 
ally cemented the fact that the concept 
of mirroring was going to work and 
achieve our desired business goals.” 

Nevertheless, KeyCorp then institut- 
ed the chill period and a second bid 
solicitation from vendors because the 
IBM system repeatedly and unexpect- 
edly suspended data mirroring as a re- 
sult of what later was discovered to be 
improperly set performance parame- 
ters. Suspending the mirror caused the 
bank’s mainframe production system 
to slow down, which in turn made crit- 
ical services, such as Internet banking 
and automated teller machine services, 
unavailable to customers. “The solu- 
tion was right, but the tuning was off,” 
Trent says. 

Miller says two factors had to be ad- 
dressed. The first was properly config- 
uring and sizing the system’s hardware. 
The second was determining the right 
parameters for how much slowdown 
the system would tolerate in the pro- 
duction environment before suspend- 
ing the mirror. 

IBM project manager Esperanza Mur- 
dock, who was brought into KeyCorp 
after the two-month chill period, attrib- 
utes many of the bank’s problems to 
the inherent complexity of data mirror- 
ing coupled with a lack of communica- 
tion between IBM and KeyCorp offi- 
cials at the outset of the project. 

“There was a preconceived notion 
that this was a turnkey solution as op- 
posed to an integration project,” Mur- 
dock says. “On a large-scale project 





www.computerworld.com 


like this one, there are so many pieces 
to the puzzle. A big piece is the net- 
work, but there also are the storage 
machines, the connectivity between 
machines, the automated software and 
the resources available. At the begin- 
ning of this project, there wasn’t a level 
set of requirements and expectations 
and what the solution was all about.” 

To solve the problems, KeyCorp and 
IBM made several changes. First, they 
doubled the capacity of the cache sys- 
tem to 32GB. They also increased the 
number of data movers — the systems 
in Gaithersburg that poll the bank’s 
mainframe environment in Albany for 
data updates — from four to five. And 
they added another OC3 channel to in- 
crease data throughput. The two com- 
panies also implemented IBM’s Geo- 
graphically Dispersed Parallel Sysplex 
(GDPS) software tool to automatically 
manage the data movers and the XRC 
environment. This eliminated the need 
for operators to manually enter and 
change commands, which in turn elim- 
inated the possibility of human error. 

“Once we brought in the GDPS soft- 
ware and took advantage of their auto- 
mation constructs, we suspended a lot 
less,” says Trent. “Before, we conserva- 
tively set the thresholds too low, and it 
would trip the system, and the mirror 
would suspend, and it would take a 
few hours to figure out why we’d sus- 
pend, and we’d have to talk about the 
best time to resume the mirror without 
problems.” 

In retrospect, “we hadn’t really done 
our homework and gone to IBM’s Red 
Book,” a compendium of user experi- 
ences that IBM maintains for each of 
its products, Trent says. “We found 
ourselves reinventing thresholds and 
parameters that were already denoted 
by other implementations of the 
[XRC] software. We should have paid 
more attention to those things upfront. 
We all like to look at our own environ- 
ments as if they’re unique.” 

Because of the inherent complexity 
of data mirroring, Phil Poresky, an ana- 
lyst at GlassHouse Technologies Inc., a 
research and consulting firm in Fram- 
ingham, Mass., advises users to spend 
more time evaluating the support staff 
that will be implementing the technol- 
ogy, rather than the technology itself. 

“Mirroring technology is mature, 
but salespeople do not like to tell you 
about all of the challenges and contin- 
gencies,” Poresky says. @ 41777 


NARROWING THE FIELD 


See why KeyCorp chose IBM as its vendor: 


QuickLink 41778 
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ONE ATTENTIVE 


SAN SWITCH. 


THE CISCO MDS SAN SWITCH. Your Fibre Channel SAN solution may handle your workload now. But what about next month? 
Or next year? Is it time to hold true to a pure Fibre Channel environment or explore the option of an IP approach to SAN? Now you can 
choose both. Introducing the Cisco MDS family of switches. They grow. They adapt. They evolve. They offer Fibre Channel for high 
performance data center applications. FCIP and optical technology for distance. And iSCSI for scalability. Need to add a new application? 
Just add a new blade. Are you ready to take on the future of your data? You could be. Now. 


Cisco SYSTEMS 


Visit cisco.com/san to learn more. 
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As XML content expands, good 
management tools 


are key. Native 


XML databases, SQL database add- 
ons and third-party integration tools 
all present advantages — and trade- 
offs. BY ROBERT L. SCHEIER 


HEN THE CLASSWELI 

Learning Group began 

building a database of 

online lesson plans and 
other information for teachers, it need- 
ed to store and access content ranging 
from word processing files to copy 
scanned from textbooks. Because it 
needed to store, access and query all 
those data types, the publisher chose 
an XML database product. 

“XML was pretty much a no-brainer 
for us,” says Brendan Collins, director 
of IT at Classwell, a division of pub- 
lisher Houghton Mifflin Co. in Boston. 

IT organizations are using XML for 
everything from integrating applica- 
tions to content management and 
access control. Native XML databases 
can help with storing and managing the 
resulting flood of XML documents, but 





they’re not the only option. Major data- 
bases now offer XML translator fea- 
tures that transform XML documents 
into fields within their relational struc- 
tures. That transformation process can 
eliminate many of the benefits of using 
XML, however, so SQL database ven- 


| dors say they’re planning to add native 
XML capabilities to their products. 


In the meantime, third-party vendors 
offer tools that they claim offer more 
complete integration among XML, re- 
lational and even flat-file databases. 

Deciding which XML data store is 
right for you depends on whether you 
have a stable schema, or design, for 
your XML data; the degree to which 
you need to store and audit transac- 
tions in their original form; and 
whether the application is critical 
enough to justify the expense of a sep- 
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arate, native XML database, say users 
and software vendors. 

XML is a hierarchical data descrip- 
tion language that uses tags, such as 
“customer,” to define the data compo- 
nents within a document. In contrast, 
relational databases such as Oracle, 
Microsoft SQL Server or IBM’s DB2 
organize data in well-defined rows and 
columns within tables. 

The fact that XML documents carry 
not only the data but also the defini- 
tions of that data makes it easier for 
those documents to “describe them- 
selves” to multiple applications during 
a transaction. Compared with SQL, 
XML is also much more capable of 
dealing with unstructured data and 
data that can be more dynamic in both 
its meaning and its structure, says Paul 
Hessinger, executive vice president of 
HealthRamp Inc. in New York. Health- 
Ramp develops software that allows 
doctors to prescribe medications using 
handheld computers. “The permanent 
data we need to take care of we store 
in SQL Server. But as we move the 
data from a handheld device to a Web 
server, that’s largely done via XML,” 
he says. 


Choosing an Approach 
XML also makes it easier to change the 
type or format of data stored in a data- 
base, says Jake Freivald, director 

of marketing at iWay Software, a divi- 
sion of New York-based Information 
Builders Inc. that develops XML inte- 
gration tools. In an XML database, he 
says, adding a business-address field to 
a database only requires creating an 
extra set of data description tags with- 
in the document. In a relational data- 
base, he says, that change would re- 
quire a new set of tables for the busi- 
ness addresses and defining how those 
new tables relate to every existing 
table in the database. 

However, once the data is in XML, it 
can be harder to access in new or flexi- 
ble ways because the XML tags pro- 
vide a hierarchical method of describ- 
ing data. For example, under the “pa- 
tient” tag, an XML document might 
have a subtag for “name,” which in 
turn might have subtags for “first 
name,” “last name,” “middle initial” 
and “nickname.” Any query that can’t 
understand that hierarchical structure 
will have to search every word of 
every document, resulting in possible 
performance bottlenecks. 

One way to store XML data is ina 
native XML database that stores, 
searches, accesses and retrieves XML 
documents in their complete and origi- 
nal form. This boosts performance be- 
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cause a native XML database can opti- 
mize queries about customers, 

for example, by searching only the data 
with the appropriate tags and subtags 
that identify customers, rather than all | 
the text in a document. Storing XML 
documents in their entirety, rather 
than breaking them into individual 
database fields, also makes it easier to 
audit or reconstruct transactions be- 
cause all the details are stored in their 
original order and sequence. Imple- 
menting well-understood and stable 
XML schemas, or database designs, 
can also be easier in a native XML 
database than in a relational database 
that must translate XML documents 
into columns and rows. 

The native XML database Collins 
chose, Tamino from Darmstadt, Ger- 
many-based Software AG, had early re- 
liability and data-corruption problems 
but has since improved dramatically, 
he says. Collins did, however, have to 
write his own software for loading 
data, as well as for version control of 
the XML documents. 


Other Roadblocks 
This lack of tools is only one strike 
against native XML databases. Analyst 
Carl Olofson at IDC in Framingham, 
Mass., predicts that the very small 
market for native XML databases — 
just $42 million last year — will grow 
to only about $77 million in 2007 be- 
cause relational database vendors and 
other software players will build native 
XML capabilities into their products. 
Until they develop native XML sup- 
port, major database vendors offer 
translation layers that either “shred” 
the XML document into small enough 
components to store in the fields of a 
relational database, or “cram” the en- 
tire XML document into a single field, 
according to Ron Schmelzer, a senior 
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analyst at ZapThink LLC, a market re- 
searcli firm in Waltham, Mass. 

For example, Cengent Therapeutics 
in San Diego uses Oracle’s XML DB 
function to share protein structure 
data stored in Oracle with data stored 
in Cengent’s own XML database, says 
Kal Ramnarayan, Cengent’s vice presi- 
dent and chief scientific officer. In this 





process, XML documents are created 
from SQL data, a critical capability that 
allows existing data to be stored and 
queried from new XML databases. 

But XML enablement wouldn’t work 
for Jerry Lettow, an IT architect at 
Hewlett-Packard Co. who is building an 
XML-based intranet portal to share 
sensitive financial information with 
thousands of key managers. Lettow 
needs to be able to review transactions 
to prove, for example, exactly what in- 
formation was provided to the portal 
by a financial application. 

Using Oracle, Lettow says he would 
have had to “go in and query to find out 
what special unique identifier” had 
been assigned to store that information 
within Oracle’s columns and rows. He 
also worries that Oracle will stick to its 
vendor-specific XML query language 
instead of using the World Wide Web 
Consortium’s XQuery standard. 


The Third Alternative 
Lettow instead chose a third path: He 
used a third-party tool to link his rela- 
tional and XML worlds. With Redwood 
City, Calif.-based Ipedo Inc.’s XML In- 
formation Hub, he says, it’s easier to 
find such information because the 
XML documents are stored whole. 
Several vendors offer similar tools to 
translate and manage data from multi- 
ple sources into XML documents. 
Eventually, Schmelzer says, all ma- 
jor database vendors will offer native 
XML support. But to be truly native, 
the database must be able to take any 
arbitrary XML document and insert it 
into the data store without any modifi- 
cation and then retrieve that docu- 
ment without shredding, jamming or 
otherwise modifying it, he says. “Can 
it handle arbitrary variables in the 
XML documents, like lots of repeated 
tags and lots of levels of hierarchy?” 
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Schmelzer asks. Another key feature is 
support for still-emerging standards 
such as XQuery. 

Collins also warns not to underesti- 
mate the work involved in implement- 
ing XML. While his use of XML will 
save him money in the long run, he 
says schema design can be “a lot of 
work, and the more content you have, 
the more work it is.” 

Building the schema right the first 
time can also be important, says 
Ipedo’s vice president of marketing and 
co-founder, Tim Mathews. “If you’re 
using an XML-enabled relational data- 
base, to change your schema you have 
to dump and reload all of your data,” 
he says, an unacceptable option for 
production databases that must be 
constantly available. 

Before choosing an XML data store, 
customers must dig beneath the cov- 
ers to understand exactly how the 
XML documents are stored and how 
they can be queried, says Lettow. 
“Does it store it as you uploaded it, 
or does it break it down into separate 
little instances [of data]? Can I get out 
exactly what I put in, or do I have to 
create a lot of extra code or a lot of 
special processes to re-create the orig- 
inal XML?” 

But the effort is worth it, he says. 
“After playing with an XML database 
for the last year and seeing how pow- 
erful it is, I’m surprised that more peo- 
ple aren't plugging into just when and 
how to use them.” @ 41948 


Scheier is a Computerworld contribut- 
ing writer. Contact him at rscheier@ 
charter.net. 
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Here's how the XML database tool v 
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HE BLAME FOR SOFTWARE 
bugs belongs nearly every- 
where. It belongs to ven- 
dors that rush products to 
market without adequately 
testing them, a sin also shared by cor- 
porate in-house development teams. It 
belongs to a legal system that has given 
software developers a free pass on 
bug-related damages. And it belongs to 
university computer science programs 
that stress development over testing. 
Blame, however, doesn’t belong with 
Sarfraz Khurshid, an MIT researcher 
who’s at the forefront of developing 
automated testing processes for soft- 
ware. Testing software involves gener- 
ating “inputs” — instructions for soft- | 
ware to follow. But there are as many 
ways to test software as there are dif- 
ferent snowflake patterns. For every 
possible way software can break, there 
must be a test that can detect that. 
“There are an infinite number of in- 
puts,” says Khurshid, but once you 
know how to automatically generate 
them, “which ones do you generate?” 
Khurshid has developed algorithms 
for generating inputs, and he expects 
the automated testing algorithms to 
improve over the next few years. But 
experts say improvements in automat- 
ed testing technology alone won't nec- 
essarily lead to better software quality. 
“Most software products have not 
been designed for quality,” says Herb 
Krasner, who heads the Software Qual- 
ity Institute at the University of Texas 
at Austin. “In the commercial world, 
quality software is not the primary 
motivation — the primary motivation 
is to get to market as fast as possible. 
It’s the race to market that compromis- | 
es quality in many cases.” 
Inadequate software testing is 
blamed for $60 billion in annual costs 
incurred by users and vendors, accord- 
ing to a study conducted last year by 
the Commerce Department’s National 
Institute of Standards and Technology 
in Gaithersburg, Md. Viruses that ex- 
ploit defects can cause billions of dol- 
lars in additional damages. 


Standards Push 


Today, there are no standards for mea- 
suring software quality, broadly de- 
fined as functionality, reliability, us- 
ability, efficiency, maintainability and 
portability. But there’s a long-term ef- 
fort under way to develop standards 
for comparing the quality of products, 
something that’s impossible today. 
This effort was prompted, in part, by 
one of the most famous software bugs 
of all: The one that caused the 1999 
crash of the Mars Polar Lander on 


| 
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Software 


BUGS 


Onthe March 


Technical, management and legal 
issues suggest they'll be around 
awhile. BY PATRICK THIBODEAU 


Mars. It was a watershed event 


for NASA and led to a decision aA ita 
aE 


by the space agency to expand 
its work with universities on 
quality issues. It even signed a 
lease allowing Carnegie Mellon Uni- 
versity to establish a West Coast cam- 
pus at Moffett Field, Calif. 

NASA also helped to spearhead the 
creation of the Carnegie Mellon-based 
Sustainable Computing Consortium 
(SCC), an effort that includes compa- 
nies such as FedEx Corp., Pfizer Inc., 
Microsoft Corp. and Oracle Corp. 


LLE ARSENAULT 


ISABE 


Engineers know how to test 
the quality of many complex 
products, such as planes, 
drugs and bridges. But stan- 
dards for measuring software 
quality and comparing similar soft- 
ware products don’t exist. 

What does it mean, for instance, 
when Microsoft says it wants to pro- 
duce “trustworthy” products or Oracle 
sets “unbreakable” as its standard? 

“How do you compare something 
that is trustworthy against something 
that is unbreakable?” asks William 
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Guttman, director of the SCC at Pitts- 
burgh-based Carnegie Mellon. 

The SCC is seeking to support the 
creation of standards and specifica- 
tions that will make it possible to mea- 
sure a system’s attributes, such as de- 
pendability and security. If these at- 
tributes can be measured in a software 
product, users will be able to make 
purchases based on quality, says 
Guttman, who compares the task 
ahead for his group to developing a 
municipal building code from scratch. 


Blame the Lawyers 

But some argue that future improve- 
ments in software quality are directly 
tied to legal and regulatory issues. 

Cem Kaner, a computer science pro- 
fessor at the Florida Institute of Tech- 
nology in Melbourne, who examined 
software’s legal protections in the book 
Bad Software (John Wiley & Sons, 
1998), compares the legal liability pro- 
tections enjoyed by vendors to what 
automakers had before the arrival of 
“lemon laws” that guarantee con- 
sumers certain rights. 

Vendors typically limit liability to 
the cost of the software. Damages suf- 
fered by a user as a result of downtime, 
such as lost sales, aren’t covered. 

The liability issue is becoming par- 
ticularly pressing because of the dam- 
ages wreaked by software viruses, 
which often exploit software defects. 
As these attacks become more sophis- 
ticated, they have the potential to ex- 
pose customer financial records, dis- 
rupt businesses and “leave a wake of 
enormous destruction behind them,” 
says Kaner. 

Building software with as few bugs 
as possible is Dale Campbell’s passion. 
As the senior director of IT at Warner 
Music Group, he sees a tremendous 
opportunity for lowering costs by im- 
proving software development. 

Campbell is using tools, such as 
Monrovia, Calif.-based Parasoft Corp.’s 
error-detection software, to manage 
techniques to improve his software. He 
says his development processes are 
improving, as are the tools he’s buying. 

“Software defects really equate to re- 
work, and rework equates to wasting 
money,” says Campbell, a software en- 
gineer by training who manages appli- 
cation development at the New York- 
based entertainment company. “I don’t 
think we would accept the same level 
of defects in the physical products we 
bought.” @ 42081 


MORE IN THIS ISSUE 


For Tommy Peterson's take on software quality, read 
her column on page 35. 
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rability 


Dogs VPN Project 


Aglitch in personal firewall software keeps 
a VPN off-line - and prompts a scramble 
for the right fix. By Vince Tuesday 


RECENTLY CHANGED posi- 
tions and have been trying 
to understand the many 
projects already under 
way here. The most vital of 
these is a planned virtual pri- 
vate network (VPN) rollout. 
My company has many staffers 
who travel, as well as those 
who want to work 
from home. 


Today, these people SECURITY 
MANAGER'S 
very high-price rates JOURNAL i 


use ISDN or dial-up 
lines. These have 


for calls from hotels 
and high fixed-cost 
line rental and call charges 
from staffers’ homes. If the se- 
curity team and I could let 
users connect using existing 
broadband Internet connec- 
tions, the performance would 
be better and the costs lower. 

Many users appear to be 
connecting company laptops 
directly to the Internet to get 
fast access, but their systems 
get infected with viruses or 
worms and then propagate the 
infections by connecting to in- 
ternal company systems. Giv- 
en that, a VPN should dramat- 
ically improve security as well 
as save the company money. 

Unfortunately, the project 
has been in the works for 18 
months and still hasn’t deliv- 
ered a workable system. I was 
flabbergasted, since I’ve al- 
ways run projects on a three- 
month cycle. 

It’s now just three weeks 
until the go-live date, but 
there’s one huge problem that 
must be resolved. The IT team 
has put together a software 
package for the laptops that 
includes a VPN dialer and 
security products. This pack- 
age will sit on our standard 
software build and include 


| 


ciel. 


————_ 


antivirus software and a per- 
sonal firewall. Although the 
machine will be connected 
to the Internet, the firewall 
will block all inbound and 
outbound connections other 
than the VPN link. 

That sounds great, but the 
testing that my team did re- 
vealed that the fire- 
wall loads as a ser- 
vice when the oper- 
ating system boots 
and shuts down 
when the user shuts 
down the machine. 
Since the network- 
ing software runs as a service 


| on top of Windows, the ma- 


chine is unprotected for at 


| least 30 seconds during boot- 
| up and shutdown. 


| Worst-Case Scenario 


In the worst case in our test- 


| ing, it took more than two 


| minutes for the fire 


wall to 


| load and start doing its job. 

| Why doesn’t it just load the 

| protection before starting the 
| network? Or start the network 


without configuration, then 


| load the protection and con- 
| figure the network? 


I won’t mention the name of 


| the software vendor, since I 
| want it to have a chance to fix 
| the problem. I’m pretty sure 


the problem affects some 
other vendors’ products, so if 
you have a personal firewall 


| On your machine, it might 
be a good idea to check that 
| you don’t have the same vul- 


| 


nerability. 
Given how far down the 


| road the IT team members 


were toward using this securi- 
ty product, they didn’t want to 
give it up. Instead, they’ve 
been trying to add another 
layer of defense. Instead of 





using the USB Asymmetric 
Digital Subscriber Line 
(ADSL) modem delivered 
with the broadband service, 
they intend to buy everyone 
an ADSL router that includes 
a hardware firewall. The fire- 
wall is built into the firmware 
of the router and starts at the 


| same time the router connects 


to the Internet, so the user’s 
machine is always protected. 

My task is to sign off that 
the configuration of the router 
firewall is acceptable. But I’m 
not going to do that. Yes, the 
configuration is fine; the secu- 
rity staffers have turned on 
network address translation 
(NAT) so that all internal ma- 
chines are hidden, and they’ve 
enabled a firewall to block all 
inbound connections. 

The security team has even 
password-protected the con- 
figuration so it will be difficult 
for each user to modify the 
settings. But just because it 


| works on a technical level, 


that doesn’t mean the IT secu- 
rity group should approve it. 

The routers are much more 
expensive than fixing the soft- 
ware bug in the personal fire- 
wall or ripping out the flawed 
software and replacing it with 
a better package. 


Remote Access Risks 
Also, I know that some users 
will break into the routers and 
change the configurations 
when their children want to 
play Internet-based games. 
These typically require an in- 
bound network connection for 
network play, so the configu- 
ration will be reset and by- 
passed — and we won't know 
it because we’re not set up to 
centrally monitor remote fire- 
wall hardware or software 
configurations. 

Most of our staffers have 
multiple machines at their 
homes, so they might not be 
using their work machines 





for gaming. But I’m certain 
that all of our staffers will con- 
nect their own machines into 
the same router we provide. 
The lure of that company- 
funded broadband connection 
will be irresistible. 
Furthermore, the firewall 
and NAT on the router defend 


| against only external threats 


from the Internet; any ma- 
chines inside the home will 
have unfettered access to the 
corporate laptop. 

Then there’s the issue of re- 
mote travel. I know that our 
staffers who have laptops 
aren’t going to take their 
router/firewall with them be- 
fore they plug into the broad- 
band connections at hotels. 

To their credit, the IT team 
did manage to find a pocket 
hardware firewall that sits in 
line with the network cable 
and filters traffic. It’s only 
about the size of a credit card 


| and offers always-on network 
| protection. 


But during testing, the de- 


| vice somehow shorted out one 


of our network devices so bad- 
ly that smoke was pouring out 
of it, giving a whole new 
meaning to the word firewall. 
If we could just get the ven- 
dor to fix the start-up order 
so the firewall starts before 
the networking software, 
then we could save a lot of 
money, offer access in a wider 
range of environments and be 
more secure. The only argu- 
ment against it seems to be 18 


| months of project inertia. 


This should be an interest- 
ing test for me to understand 
my new employer’s commit- 
ment to security. I’m meeting 
with the software firewall ven- 
dor next week. I'll let you 
know how we get on. Will we 
buy hundreds of expensive 
routers as a Band-Aid on one 
part of the issue, or will we fix 
the problem at its source? Stay 
tuned. @ 42098 


WHAT DO YOU THINK? = 


This week's journal is written by a real 


| security manager, “Vince Tuesday,” whose 


name and employer have been disguised 
for obvious reasons. Contact him at vince. 
tuesday@hushmail.com, or join the dis- 
cussion in our forum. QuickLink a1590 


To find a complete archive of our 
Security Manager's Journals, go online to 
© computerworld.com/secjournal 
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SECURITY LOG 


ple at their computers and dis- 
cusses the ways users can 
protect themselves. He packs 
the text with juicy anecdotes 
and news reports of spy activi- 
ty. These stories, which range 
from companies stealing one 
another's secrets to corrupt 
cops and tales of global intelli- 
gence agencies, are an enjoy- 
able read. | also appreciated 
the inclusion of the pricing in- 
formation for the products he 
discusses. Too many books 
simply refer you to the vendor. 

Unfortunately, the book’s 
biggest strength is also its one 
fault: McNamara spends too 
much time on the attack anec- 
dotes and not enough provid- 
ing in-depth details on how to 
keep your systems safe. This 
book is entertaining, but as a 
security professional, | found 
it more useful as a source 
of budget-justifying stories 
than as a source of practical, 
hands-on advice. 

- Vince Tuesday 


Bluefire Boosts 
Wireless Security 


Bluefire Security Technologies 
Inc. in Baltimore announced a 
version of its Mobile Firewall 
Plus security software for car- 
riers of wireless services. The 
software is designed to pro- 
tect mobile devices such as 
PDAs and smart phones from a 
variety of security threats, in- 
cluding unauthorized access, 
denial-of-service attacks, in- 
formation theft and spoofing, 
according to the company. The 
technology is aimed at carriers 
operating GPRS and CDMA 
wireless networks. 
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LANDesk Upgrades | 
Management Suite 


LANDesk Software Inc. in 

South Jordan, Utah, last week 
announced its LANDesk Manage- | 
ment Suite 8. The upgrade in- 
cludes expanded inventory man- 
agement and reporting tools, the 
company said. The database in the 
suite is now scalable to 200,000 
nodes. Pricing ranges from $80 
per node for 1,000 nodes to $89 
per node for 10 nodes. 


IBM’s TotalStorage 
Gets Fibre Channel 


IBM last week announced an up- | 
grade to its high-end TotalStorage | 
Enterprise Storage Server that of- 
fers Fibre Channel connections 
for its Peer to Peer Remote Copy 
disaster recovery software. Total- 
Storage formerly ran only on Es- 
con connections, which are 30% 
slower and as much as 50% 
more expensive than the Fibre 
Channel connections, according 
to IBM. Most enhancements to 
TotalStorage will ship next month; 
all will be available by February. 


Net Performance 
Monitor Ships 


Network Physics Inc. in Mountain 
View, Calif., last week announced 
an appliance to link network and 
systems performance to the de- 
livery of business services. The 
NP-2000 includes a new Busi- 
ness-Network Integration Engine 
to monitor all network traffic and 
identify performance, use and 
routing concerns. 


Edocs Rolls Out 
Billing Suite 

Natick, Mass.-based CRM soft- 
ware maker Edocs Inc. last week 
announced Version 4.0 of its ea- 
Suite billing software. The new 
release comes with boosted busi- 
ness-to-business analytic, elec- 
tronic invoicing and reporting ca- 
pabilities, said edocs. EaSuite 4.0 
is available now, and pricing 





starts at about $500,000. 


TOMMY PETERSON 


Send in t 
Exterminators 


UGS. The nickname for software defects 
makes them sound like a natural phenome- 
non, even kind of cute and relatively harm- 
less. When I say “bug,” I think ladybug. 
But this week’s Future Watch (see page 32) 
suggests that programming errors are akin to cock- 
roaches — as difficult to eradicate as those hard- 
shelled denizens of the dark and damp that, as urban 
legend would have it, could survive a nuclear blast. 


Or maybe the correct anal- 
ogy is to termites, as in 
something that insatiably 
chews through a company’s 
profits and undermines the 
framework of the business. 
The Sustainable Comput- 
ing Consortium, a collabora- 
tion of major corporate 
IT users, academics and gov- 
ernment agencies, has esti- 
mated that defective soft- 
ware cost businesses around 
the globe $175 billion in 2001. 
And a 2002 study by the 
U.S. Commerce Depart- 
ment’s National Institute of Standards 
and Technology indicated that software 
bugs cost U.S. companies about $60 bil- 
lion per year. 
That’s a big bite out of the economy. 
Software is almost everywhere — 
toaster, in your car, in the power grid, in 


the airplane you'll take to meet your next 


client and, of course, in your back-office 
and, increasingly, front-office systems, no 
matter what business you're in. 

It’s time we stopped talking about 
software defects as though they’re just 
an inevitable part of doing that business. 

Last week in this space, Computer- 
world’s Robert L. Mitchell complained 
loudly about software vendors that as- 
sume no liability for the defects in 
their products and about the legal loop- 
holes that allow them to do so. Ratchet- 
ing up legal pressure on companies to 
stop selling defective software is proba- 
bly a good idea. 


in your | 





But a hailstorm of litiga- 
tion isn’t going to solve all or 
even most of the problems 
caused by flawed code. 

One reason is that the 
wheels of justice grind ex- 
ceedingly slowly and the 
problem is building to crisis 
proportions. 

Another is the intricate in- 
terrelationship between the 
vendors of large software 
systems and their customers 
— a company has to be 
pushed pretty far to sue the 
vendor that has its tentacles 

around so much key information. And 


| then there’s the fact that a lot of the pro- 
| gramming errors that cost companies 
| money are 


made by in-house coders. 
Almost everyone agrees that the rush 
to market is the reason so many software 
bugs crawl through development shops 
and creep out to end users. 
Too often, cutting corners in quality is 
seen as a necessary trade-off to getting 


| the product out the door quickly. And 
| we know defects that are overlooked in 
| the race to market become exponentially 


more expensive to find and fix the 


| longer they go undetected. 


But the Darwinian world of modern 


| business isn’t likely to slow down to 


give coders time to use current methods | 
| on developers’ desktops. @ 42282 


| WANT OUR OPINION? 


to construct their programs with lap- 
idary precision. 

“The mind-set has to be speed and 
quality,” says Eric Schurr, a vice presi- 
dent at Rational Software Corp., part of 


IBM’s Software Group. Schurr recalls a 
boss of his once saying that asking a 
business to choose between quality and 
speed was like asking a person to de- 
cide between breathing and having his 
heart pump. 

Not surprisingly, since Rational makes 
software that automates program devel- 
opment and testing, Schurr believes that 
automation is a key to better quality. 

But it’s not enough. 

Asked when automation tools for test- 
ing complex programs would be avail- 
able, he replies that they have “been 
around for 10 years.” 

Clearly, the spread of automated de- 
velopment and testing hasn’t kept pace 
with the spread of software into every 
area of business and our lives. 

The efforts to impose best practices in 
development shops and set standards 
should help. But it will be the market it- 
self that finally provides the necessary 
pressure to squash the bugs. 

“As software moves to the center of 
the business, when it isn’t just a back- 
office function, companies find out that 
they must be more concerned about 
quality,” says Schurr. 

A vice president at a midsize Mid- 
western shipper, who didn’t want to be 
identified, says his company recently 
lost $85,000 and several customers be- 
cause of two bugs. One bug was in a ven- 
dor’s routing and tracking software, and 
the other was in code created in-house 
to connect the routing system to the 
company’s inventory system. 

“The price tag on bad software really 
hits home when you've got to talk to 
screaming customers, pay to make good 


| and know that they’re never coming 
| back,” he says. “ 
| work for us are already doing things dif- 


The programmers who 


ferently, and we'd have to think very 
hard about using the vendor again.” 
When enough companies feel the 


| sting, a lot more software bugs will die 





For more columns and links to our archives, go to 
www.computerworld.com/opinions 
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BRINGS IT ALL 
TOGETHER. 


Imagine giving 

your applications 
optimal performance 
on blade servers. 


Thanks to the blade server platform, you've 
reduced everything—server size, space, cables, 
management overhead and most importantly, 
costs. But then you realize that even when 
consolidated, the new server platform still has 
to meet the same demands: it has to be highly 
available, secure, scalable and completely 
reliable in its performance. 


How do you meet those demands without 
sacrificing all you've just gained? F5‘s BIG-IP® 
Blade Controller software provides traffic 
management that virtualizes and load balances 
the blade server environment. Now you can pool 
blades and concentrate their power, route traffic 
(to those that are performing well, and manage 
them as a single entity. And with BIG-IP Blade 
Controller loaded directly onto blade servers, 
you're guaranteed to achieve the high 
availability performance it takes to reliably 
deliver applications. 


Give your imagination free reign and you 
bottom line room to grow. 

Visit www.f5.com/bccw to learn more and 
experience a flash demo. Or call 800-916-7185. 
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Z It’s déja vu all over again. 
Sener ne For the second year ina 


row, most of the IT profes- 
SALARY sionals who responded to 
‘ Computerworld’s annual 
salary survey received only 
modest pay raises, as well 
as flat or smaller bonus 


—_——_————————___ amounts compared with pre- 


. ‘y ) + vious years. The average 
/&> 





raise of this year’s nearly 
15,000 respondents was 
about 6.7%. On the bonus front, 71% of workers re- 
ported no change in compensation from a year ago. 
Meanwhile, the 15% of workers who reported decreases 
in bonuses said they fell by an average of 45%. 

This is also the second consecutive year that some 
IT workers saw their paychecks shrink as a result of 
company-mandated salary reductions, which out- 
paced average pay raises this year by more than 2 to 
1. While fewer workers reported pay cuts this year — 
8.6% compared with 9.5% last year — this year’s 
group was forced to forfeit the same amount as last 
year’s — an average of 13% of their base salaries. 

But most IT workers aren’t as unhappy as you 
might expect, given this year’s pay figures. Com- 
pared with the 4% average increase in pay for U.S. 
workers reported by the U.S. Department of Labor’s 
Bureau of Labor Statistics, [IT workers are holding 
their own in a tough economy. 

In fact, only 22% of workers said they are dissatis- 
fied with their overall compensation, even though 
many are working longer hours and shouldering 
heavier workloads because of permanent staff layoffs 
at their companies. Nearly 70% of IT professionals 
report regularly putting in more than 40 hours a 
week on the job, with one out of every four IT pro- 
fessionals working between 46 and 50 hours a week. 

More than half of all IT workers — 54% — are sat- 
isfied with their overall compensation, and nearly all 
of the 40-plus IT workers, managers and CIOs inter- 
viewed for this story said they consider themselves 
lucky just to have a job in IT. 


onsen , 


More Than Money 

Consider the case of Diane Foote. A Unix systems 
administrator at Accelrys Inc., a pharmaceutical soft- 
ware and services company in San Diego, Foote is 
earning the same amount of money she was earning 
more than two years ago. “In those two years, I was 
laid off, rehired as a consultant, and then my contract 
ended. I found [this] job fairly quickly but took a cut 


Se ea 


Are you being paid what you’re 
worth? Use our new Smart Salary tool to compare your 
pay against results from our 2003 Salary Survey of 
pln ara i iY mM 
QuickLink 23740 = www.computerworid.com z 1 7 i 
leclining iscs. By Julia King 
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in pay to get it,” she says. 
Is she satisfied? “Money 
isn’t the most important 
thing about a job to me,” 
Foote says. “The benefits 
at my new place are good 
— three weeks of vacation 
to start and an on-site 
health club. So, I’m happy 
... to have found a job so 
quickly in this economy.” 
Joyce Young, the CIO at 
CP Kelco US, a manufac- 
turer of food ingredients, 
says economic pressures 
translate into lower 
salaries for most IT work- 
ers, particularly middle 
managers. “The market 
trend in Chicago right now 
seems to support lower 
salaries for IT, especially 
at the director level — 
around $120,000 to 
$150,000. People who used 
to be making the high end 
of this scale are accepting 
positions at the lower 
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Getting 
Greener 


Director/vice 
president of networks 


6.8% 
E-commerce manager 


40%? 


Communications 
specialist 


41% 


Figures show change in total 
compensation, 2002 to 2003 


end,” says Young, who 
works in the Chicago office of Wilmington, Del.- 
based CP Kelco. In the next 12 months, her company 
will hire two senior managers for IT projects focused 
on CRM and supply chain improvements. Their 
salaries will be determined by local market trends, 
Young says. Right now, she notes, “there are still 
many IT people out of work, and that seems to drive 
salaries down.” 

Lower-cost offshore outsourcing is another factor 
contributing to flat or decreasing salaries for IT 
workers, says Ron Glickman, CIO at San Francisco- 


alata dtblicbesliilieisalbeadte tel dubia based DFS Group Ltd., which operates 400 duty-free 


“Money isn’t the most important thing about a job,” says 


‘Total Compensation by Region 


laa ay MIDDLE ATLANTIC SOUTHATLANTIC NORTHCENTRAL SOUTHCENTRAL MOUNTAIN ela 


REGIONS ARE AS FOLLOWS: 

New England: Maine, Vermont, New 
Hampshire, Massachusetts, Connecti- 
cut, Rhode Island; Middle Atlantic: 
New York, New Jersey, Pennsylvania: 
South Atlantic: Delaware, District of 
Columbia, Maryland, Virginia, West 
Virginia, North Carolina, South Caroli- 
na, Georgia, Florida, Puerto Rico, U.S. 
Virgin Islands; North Central: Wis- 
consin, Michigan, Illinois, Indiana, 
Ohio, North Dakota, South Dakota, 
Minnesota, Nebraska, lowa, Kansas, 
Missouri; South Central: Kentucky, 
Tennessee, Mississippi, Alabama, 
Oklahoma, Arkansas, Louisiana, 
Texas; Mountain: idaho, Montana, 
Wyoming, Nevada, Utah, Colorado, 
Arizona, New Mexico; Pacific: Alaska, 
Washington, Oregon, California, 
Hawaii, Guam 


$92,207 
$67,667 
$76,544 
$94,808 
$85,693 
$73,708 
$47,004 
$67,084 
$52,381 
$71,108 
$60,685 
$82,460 
$81,178 
$60,190 
$99,638 
$76,812 
$78,726 


$96,391 
$52,368 
$74,181 
$77,490 
$83,690 
$77,954 
$44,884 
$58,490 
$54,623 
$64,417 
$66,630 
$78,555 
$77,252 
$65,864 
$97,495 
$75,339 
$74,544 


$108,168 
$73,140 
$84,082 
$100,624 
$100,025 
$86,490 
$52,235 
$70,531 
$61,208 
$72,951 
$72,787 
$82,654 
$91,862 
$69,983 
$107,735 
$85,367 
$82,078 


$108,810 
$63,439 
$86,696 
$98,378 
$106,764 
$81,505 
$46,600 
$71,706 
$55,428 
Network engineer $73,911 
$74,971 
$83,747 
$87,532 
$72,051 
$102,612 
$83,017 
$86,643 


$114,021 
$68,051 
$81,000 
$94,896 
$102,892 
$84,057 
$44,510 
$76,047 
$55,763 
$71,439 
$69,551 
$78,841 
$79,309 
$65,060 
$100,837 
$84,688 
$79,167 


$107,176 
$66,924 
$78,328 
$93,117 
$97,528 
$76,958 
$50,047 
$68,609 
$51,621 
$72,722 
$68,087 
$82,592 
$79,005 
$66,494 
$98,452 
$85,209 
$74,256 


$98,628 
$69,605 
$81,292 
$92,717 
$84,088 
$73,583 
$40,667 
$67,963 
$53,051 
$70,272 
$60,560 
$77,069 
$74,371 

$61,553 
$97,643 
$76,180 
$67,331 


Director of IT operations 

Help desk manager 

IT manager 

Application development manager 
Project manager 

Database administrator 

Help desk/tech support specialist 
Technology/business analyst 


Network administrator 


Programmer/analyst 
Project leader 
Software engineer 
Systems administrator 
Systems architect 
Senior systems analyst 
Software developer 


TEXT - Indicates that the total base for this particular region was fewer than 30 responses but more than 15. These figures should be used for comparison only 





www.computerworld.com 


MANAGEMENT 


Boost Your Chances of Getting a Raise 


Before you march up to your manager to demand a raise, 
keep in mind that money is just one piece of the compen- 
sation pie, experts advise. First, calculate the value of 
company-provided training, medical and dental benefits, 
retirement savings plans and spot rewards such as an af- 
ternoon off or a $200 gift certificate here or there. It very 
well could turn out that your overall compensation is in- 
deed in line with that of your peers at other com- 

panies, or at least those in your geographical 

area. 

“Salaries vary so much by region and industry 
that you really need to compare apples to apples,” says 
Laurie Levenson, president of DirectAccess Technology 
Staffing Inc. in Carlsbad, Calif. 

That said, Levenson and others note that there are cer- 
tain IT skills for which companies are willing to pay a pre- 
mium right now. On the technical side, .Net experience is 
perhaps the hottest skill, with network security experience 
running a close second. On the management side, says 


retail shops at airports and other sites worldwide. 

“In our global economy, IT work flows to the low- 
est-cost and highest-quality provider. We’re doing 
more this year than ever before on half the operating 
budget,” Glickman says, thanks largely to his compa- 
ny’s outsourcing deal with Teaneck, N.J.-based Cog- 
nizant Technology Solutions US Corp. 

“I can’t afford to hire master [IT] skills, so I buy 
master skills from an offshore partner — and only for 
the hours that I need them,” Glickman explains. On 
new IT projects, DFS, which has reduced its IT 
workforce significantly, typically outsources 70% of 


the work to Cognizant contractors offshore, retaining | 


30% of the work in-house. As projects mature, the 
mix shifts to 90% offshore, 10% in-house, he says. 

DFS isn’t alone in shedding permanent employees 
— and the fixed labor costs associated with them. 
Allmerica Financial Corp., Corning Inc. and MetLife 
Inc. have laid off IT workers over the past 12 months. 
However, they did so at the risk of being perceived as 
less-attractive employers to the expert IT workers 
they'll need to hire once the economy bounces back. 

Once a company has laid off employees, “the psy- 
chological contract is broken,” says Gartner Inc. ana- 
lyst Diane Berry. “Many C-level executives don’t get 
that. They underestimate the impact of what layoffs 
mean down the road.” 

CIO Phil Go has no illusions about the impact of 
layoffs. His employer, Barton Malow Co., a construc- 
tion management firm in Southfield, Mich., has laid 


Defense/aerospace J/0 


BASE: 449 


@ Entertainment/advertising 5% 
BASE: 445 


® Nonprofit organizations 4.1% 
BASE: 217 


| 
| 





SN We 


Gartner Inc. analyst Linda Pittenger, “we're finding [that] 
strategic planning or any role that enhances resource uti- 
lization, such as IT alignment skills, are the ones getting 
paid more. These include IT architects and IT sourcing offi- 
cers and people involved in project and portfolio manage- 
ment and process improvement roles.” 

IT professionals with data mining and business intelli- 
gence experience could also get raises, says Kather- 
ine Spencer Lee, executive director of RH! Consult- 
ing in Menlo Park, Calif. Specifically, these include 
professionals proficient with software tools from 

SAS Institute Inc., Business Objects SA and Cognos Inc. 

Regardless of your specific skills or experience, Leven- 
son offers this advice: “Work with management on agreed- 
upon measures and get a commitment that if certain goals 
are met, a raise is received. That's a much more effective 
way to get a raise than to take a salary survey in there and 
demand it.” 

- Julia King 


| off IT workers in the past 12 months. Now, Go says, 


he needs to demonstrate how much he values the re- 
maining IT workers. If he doesn’t, “when times are 
good, [I] would expect a mass exodus because they 
would feel taken advantage of,” he says. “So we still 
give good — but not great — salary adjustments of 
between 3% and 6%. It’s not great, but it’s not zero.” 

In an unusual twist, Chetan Shah, executive vice 
president of technology at Synygy Inc. in Consho- 
hocken, Pa., hasn’t laid off IT workers. Instead, Shah 
has reduced the salaries of certain average and be- 
low-average IT workers to fund pay raises and 
bonuses for valued software engineers and other IT 
employees he wants to retain at the software and ser- 
vices company. “Reducing salaries is the last thing 
you want to do, but we have done it,” Shah says. 

Even bigger morale-busters than pay cuts are the 
daily fear of being laid off and the lack of job security 
in IT overall, sources say. One indicator is the accu- 
mulation of unused vacation time at many compa- 


| nies, says Linda Pittenger, who specializes in IT hu- 
man resources at Gartner. “The underlying theme in 


people’s minds is, ‘I need to be here and be visible. If 
there’s another cut, I need to be here to survive it,’ ” 
she says. “A lot of people have given up what we've 
worked so hard for on work/life balance.” 

As for job security, James Tow, who earns a salary 
of $67,000 as a database developer in Idaho Falls, Ida- 
ho, put it this way: “After being laid off three times, I 
have such a profound sense of paranoia, I don’t think 
I'd feel secure if the owner came here and gave me 
the keys to the building.” Asked about the likelihood 


| of a salary increase, Tow recalls the go-go days of the 


late 1990s. “We had the mind-set that we could 
walk out the door and on the same day walk in 
) the door of a company down the street and 
get a raise and a signing bonus. 
“Frankly, I think management is a little resent- 


% ful of IT because they were almost beholden to us 


then,” he says. “So, I don’t foresee IT salaries going 
up more than a basic cost-of-living increase. We’re 
back in the same boat as everyone else.” @ 41785 
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Workaday World 
28% 25% 16% 


oa 
reported reported reported 
working an working 46 working more 
average of 41 to 50 hours than 51 hours 
to 45 hours per week per week 
per week 


Wish List 


The top five perks that respondents 
wished their companies offered: 


43% 
2°70 

Telecommuting JF FO 
30% 
20% 
19% 


Additional time off 


Comp time 
Flexible scheduling 


Company car 


What’s Tempting 


Respondents said these factors would sway 
them to accept a job with lower compensation: 


43% 
38% 


More job satisfaction 
Better work/life balance 


Location 
33% 


said nothing would induce them to take 
a job with lower compensation. 








Bonus Question 


The top four types of bonuses that respondents 
said they had received in the past year: 


time in an IT department. For salary info 
consultants who responded to Computerworld’s 


site: QuickLink a3750 & www.computerworld.com 


survey, VISIT OU! 
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SENIOR MANAGEMENT POSITIONS ETN ee ale by 


ite 


Average salary 


$128,430 


Bonus 
$25,539 


Total 
$153,969 


2002 Total 
$151,593 


Banking 
$136,225 


Business 
services/consulting 
$165,200 
Computer 
services/consulting 
$162,106 
Education 
$107,390 


Entertainment/ 
advertising 
$165,449 
Government 
$95,780 


Finance/accounting 
$168,473 


Less than $100M 
$125,143 


$100M to $999.9M 
$172,148 


$IB to $10B 
$175,541 


More than $10B 
$206,019 


Average salary 
$128,164 


Bonus 
$21,552 


Total 
$149,716 


2002 Total 
$149,342 


Computer 
services/consulting 


$132,566 
Entertainment/ 
advertising* 
$150,014 
Manufacturing 


(computer)* 
$191,033 


Less than $100M 
$130,819 


$100M to $999.9M 
$171,885 


$IB to $10B* 
$201,731 


NA 


Average salary 
$120,864 


Bonus 
$14,950 


Total 
$135,814 


2002 Total 
$136,309 


Average salary 
$93,564 


Bonus 
$10,953 


Total 
$104,517 


2002 Total 
$102,134 


fete eh) 


Average salary 
$98,811 


Bonus 
$13,861 


Total 
$112,672 


2002 Total 
$112,079 


els 
r 


Average salary 
$74,899 


Bonus 
$7,073 


Total 
$81,972 


2002 Total 
$80,197 


Average salary 
$64,551 


Bonus 
$3,740 


Total 
$68,291 


2002 Total 
$67,507 


Average salary 
$77,959 


Bonus 
$7,477 


Total 
$85,436 


2002 Total 
$83,024 


A Sampling of Average Total Compensation by Industry 


Computer 
services/consulting 
$141,659 


Education* 
$103,275 


Manufacturing 
(noncomputer)* 
$112,378 


Telecommunications 
$143,425 


* 


Health care 
$96,110 


Government 
$96,656 


Finance 
$121,438 
Computer 
services/consulting 
$122,338 
Education 
$81,485 


Manufacturing 
(noncomputer) 
$110,680 


Telecommunications* 
$122,372 


Computer 
services/consulting 
$116,896 
Government* 
$82,300 


Manufacturing 
(computer)* 
$123,926 


Computer 
services/consulting* 
$88,456 


Health care* 
$73,703 


Manufacturing 
(noncomputer) 
$83,713 


Computer 
services/consulting 
$72,265 
Education 
$50,615 


Manufacturing 
(noncomputer) 
$65,812 


Banking* 
$95,182 
Government 
$68,756 


Manufacturing 
(noncomputer)* 
$99,418 


A Sampling of Average Total Compensation by Company Revenue 


Less than $100M 
$115,028 


$100M to $999.9M 
$136,744 


$1B to $10B 
$142,750 


More than $10B 


$160.661 


Less than $100M 
$85,801 


$I00M to $999.9M 
$115,515 


$IB to $10B 
$130,499 


More than $10B 
$150,691 


Less than $100M 


$95,713 


$100M to $999.9M 
$114,922 


$IB to $10B 
$105,557 


More than $10B 
$131,872 


Less than $100M 
$73,275 


$100M to $999.9M 
$81,266 


$IB to $10B 
$88,398 


More than $10B* 
$101,807 


Less than $100M 
$55,473 


$I00M to $999.9M 
$71,903 


$IB to $10B 
$77,732 


More than $10B 
$91,730 


Less than $100M 
$77,377 


$I00M to $999.9M 
$84,815 


$IB to $10B 
$89,350 


More than $10B 
$99,424 


Average salary 
$74,884 


Bonus 
$5,056 


Total 
$79,940 


2002 Total 
$78,261 


Banking 
$74,923 
Business 
services/consulting 
$77,172 
Computer 
services/consulting 
$87,247 
Education 
$62,717 
Energy/utilities 
$94,149 


Finance/accounting 


$101,279 


Manufacturing 
(noncomputer) 
$83,066 


Less than $100M 
$68,112 


$100M to $999.9M 
$83,987 


$IB to $10B 
$95,395 


More than $10B 
$99,482 


Average salary 
$65,490 


Bonus 
$3,492 


Total 
$68,982 


2002 Total 
$66,548 


Education 
$57,221 


Government 
$66,651 


Manufacturing 
(noncomputer) 
$74,116 


Less than $100M 
$63,001 


$100M to $999.9M 
$76,609 
NA 


More than $10B* 
$81,995 


rticular industry or company size was fewer than 30 responses but more than 15 responses. These figures should be used for comparison only, because they don’t constitute a statistically significant sampling. 
| base for this job tith lustry or company size was fewer than 16 responses but more than nine responses. These figures should be used for comparison only. 


tage change, 2002-20! 
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A Sampling of Other Job Titles 


2002 Total 
$92,210 


2002 Total 
$97,802 


2002 Total 
$74,203 


2002 Total 
$89,960 


2002 Total 
$126,858 


2002 Total 
$149,615 


2002 Total 
$117,769 








Tivoli. software 





See how much storage you have. 
See how much storage you need. 
See it adjust without doing a thing. 


Tivoli Storage Management helps optimize your storage systems. Underutilized space is automatically 
identified. Nonessential data is easily eliminated. It's an integral, affordable complement to server 
consolidation, and it's-compatible with most current storage systems: For more on this award-winning 


software and to download Tivoli Storage Resource Manager trial code, visit ibm.eom/tivoli/Seeit/tsrm 





MANAGEMENT 


www.computerworld.com 


42 COMPUTERWORLD October 27, 2003 





IDDLE MANAGEMENT POSITIONS FF AND ENTRY-LEVEL POSITIONS 


" ray: i eret > 


lanage 


1.8% 


Average salary 
$88,740 


Bonus 


$10,657 


Total 
$99,397 


2002 Total 
$97,384 


Computer 
services/consulting 
$103,992 


Manufacturing 
(computer) 
$106,028 


Telecommunications* 


$77,768 


Less than $100M 
$86,934 


$I00M to $999.9M 
$98,773 


$IB to $10B 
$109,497 


More than $10B 


$116,239 


Average salary 
$85,701 


Bonus 


$7,620 


Total 
$93,321 


2002 Total 
$91,652 


Computer 
services/consulting 
$94,991 
Education 
$71,829 
Government 
$75,762 
Legal/insurance/ 
real estate 
$98,037 
Health care 

$81,63¢ 
Manufacturing 


(noncomputer) 
$92,254 


Manufacturing 
(computer) 
$100,793 


Less than $100M 
$81,140 


$IOOM to $999.9M 
$92,969 


$IB to $10B 
$100,495 


More than $10B 
$107,602 


Average salary 
$83,580 


Bonus 
$8,242 


Total 
$91,822 


2002 Total 
$91,729 


Average salary 
$72,236 


Bonus 
$5,278 


Total 
$77,514 


2002 Total 
$75,839 


Average salary 
$43,734 


Bonus 
$2,077 


Total 
$45,811 


2002 Total 
$45,669 


Average salary 
$70,780 


Bonus 
$4,231 


Total 
$75,011 


2002 Total 
$73,306 


Average salary 
$64,318 


Bonus 
$3,552 


Total 


$67,870 


2002 Total 
$67,088 


Average salary 
$51,265 


Bonus 
$3,129 


Total 
$54,394 


2002 Total 
$53,778 


A Sampling of Average Total Compensation by Industry 


Computer 
services/consulting 


$92,639 


Manufacturing 
(computer) 
$107,974 
Telecommunications* 
$78,261 


A Sampling of Average Total Compensation by Company Size Revenue 
Less than $100M 


Less than $100M 
$79,447 


$100M to $999.9M 
$88,276 


SIB to $10B 
$95,769 


More than $10B 
$103,686 


Computer 
services/consulting 
$77,878 


Manufacturing 
(noncomputer) 
$70,442 


Government 
$65,813 


Legal/insurance/ 
real estate 
$84,821 
Health care 
$84,041 


Telecommunications 
$80,758 


Less than $100M 
$66,117 


$100M to $999.9M 
$82,089 


$IB to $10B 
$83,233 


More than $10B 
$89,951 


Business 
services/consulting 
$43,903 
Computer 
services/consulting 
$51,268 
Computer dealer/ 
reseller 
$50,614 
Education 
$36,927 


Government 
$44,711 


Finance/accounting 
554,015 
Legal/insurance/ 
real estate 


46.908 


Less than $100M 
$40,398 


$100M to $999.9M 
$45,655 


$1B to $10B 
$52,431 


More than $10B 
$55,935 


Computer 


services/consulting 


$78,141 


Defense/aerospace* 


$76,465 


Government 
$66,451 


Finance/accounting* 


$79,388 
Manufacturing 


(noncomputer)* 


$82,760 


$66,117 


$100M to $999.9M 


$80,332 


$1B to $10B 
$73,821 


More than $10B 
$80,948 


Banking 
$68,400 
Computer 
services/consulting 
$70,837 
Government 
$57,099 


Finance/accounting 
$65,769 
Health care 
$65,311 


Manufacturing 
(noncomputer) 
$67,411 
Telecommunications 
579,067 


Retail/trade 


$66,289 


Less than $100M 
$60,242 


$IO0M to $999.9M 
$65,825 


$IB to $10B 
$75,036 


More than $10B 
$74,014 


Computer 
services/consulting 


$58,081 


Education 
$48,520 
Government 
$57,090 
Legal/insurance/ 


real estate 
$51,427 

Health care 
$58,057 
Manufacturing 


(noncomputer) 
$52,673 


Manufacturing 
(computer) 
$65,792 


Less than $100M 
$52,197 


$I00M to $999.9M 
$55,743 


SIB to $10B 
$61,244 


More than $10B 
$63,113 


Average salary 
$66,487 


Bonus 
$4,083 


Total 
$70,570 


2002 Total 
$69,476 


Banking 
$80,011 
Computer 
services/consulting 
$71,334 


Education 
$55,884 


Government 
$66,049 
Finance/accounting 
$77,869 
Health care 
$68,194 
Manufacturing 
(noncomputer) 
$67,920 
Telecommunications 
$68,345 


Less than $100M 
$65,295 


$I00M to $999.9M 
$69,432 


$IB to $10B 
$75,409 


More than $10B 
$80,894 


Average salary 
$61,564 


Bonus 
$3,455 


Total 
$65,019 


2002 Total 
$63,762 


Banking 
$73,326 
Computer 
services/consulting 
$68,442 


Government 
$55,863 


Finance/accounting 
$70,277 
Legal/insurance/ 
real estate 
$66,585 
Health care 
$65,352 


Manufacturing 
(noncomputer) 
$61,434 


Less than $100M 
$59,248 


$100M to $999.9M 
$64,702 


SIB to $10B 
$69,590 


More than $10B 
$73,120 


Indicates that the total base for this job title in this particular industry or company size was fewer than 30 responses but more than 15. These figures should be used for comparison only, because they don’t constitute a statistically significant sampling. 
* - Indicates that the total base for this job title in this particular industry or company size was fewer than 16 responses but more than 9 responses. These figures should be used for comparison only. 
+ - Indicates percentage change, 2002-2003 


BASE: 78 


2002 Total 
$66,411 


BASE: 61 
2002 Total 


2002 Total 


2002 Total 


$95,688 $73,672 $70,925 


CHARTS CONTINUE ON PAGE 44 
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See software integrated. 
See business automated. 
See ROI! escalated. 


Rational software. Through market-leading tools and proven best practices, Rational offers the 
expertise to improve your software development for on demand business. Your teams can quickly 
build, customize and integrate new and existing applications. Open solutions built to be scalable and 


reliable — for immediate business value. For customer successes, visit ibm.com/rational/Seeit 
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STAFF AND ENTRY-LEVEL POSITIONS 


bers TeV € r at t | 


Average salary 
$72,479 


Bonus 
$4,372 


Total 
$76,851 


2002 Total 
$75,138 


Banking 
583,906 
Computer 


services/consulting 
$70,982 


Government 


175 


Legal/insurance/ 
real estate 
$75,366 
Health care 


1,952 


Manufacturing 
(noncomputer) 


$80,326 


Less than $100M 
$68,739 


$SIO0M te $999.9M 
$73,583 


SIB to $10B 
$85,162 


More than $10B 
$81,630 


Average salary 
$68,042 


Bonus 
$4,476 


Total 
$72,518 


2002 Total 
$71,562 


Dating 
$64.‘ P 


sisi 
services/consulting 
$70,642 
Defense/aerospace 
$68.716 
Finance/accounting 
$89,418 
Legal/insurance/ 
Teal estate 


é 74 16 
Health care 
$77,469 
Manufacturing 
(noncomputer) 
$74,366 
Manufacturing 
(computer) 


$95,736 


Less than $100M 
$66,426 


$100M to $999.9M 
$74,812 


$IB to $10B 
$78,575 


More than $10B 
$80,061 


Average salary 
$75,413 


Bonus 
$4,357 


Total 
$79,770 


2002 Total 
$77,857 


Average salary 
$61,248 


Bonus 
$3,095 


Total 
$64,343 


2002 Total 
$62,925 


Average salary 
$89,609 


Bonus 
$9,163 


Total 
$98,772 


2002 Total 
$97,653 


Average salary 
$71,475 


Bonus 
$4,128 


Total 
$75,603 


2002 Total 
$74,188 


Average salary 
$59,433 


Bonus 
$3,907 


Total 
$63,340 


2002 Total 
$62,288 


Average salary 
$76,173 


Bonus 
$4,134 


Total 
$80,307 


2002 Total 
$79,434 


A Sampling of Average Total Compensation by Industry 


Business 
services/consulting 
$79,480 
Computer 
services/consulting 
$81,724 
Defense/aerospace 
$73,042 


ae” 


teat care 
77.345 


Minchin 
(noncomputer) 
$73,712 
Manufacturing 
(computer) 
$97,130 


Telecommunications 
$74,869 


Computer 
services/consulting 


$68,014 


Education 
$52,073 


Government 
$62,162 


Legal/insurance/ 
real estate 
$64,992 


Health care 
$62,880 
Manufacturing 
(noncomputer) 

$61,118 
Manufacturing 

(computer) 

$71,643 


Telecommunications 


$73,649 


Banking 
$106,538 
Computer 


services/consulting 
$98,522 
Defense/aerospace 
$99,178 
Government 
$79,072 
Finance/accounting 
$112,615 
Legal/insurance/ 
real estate 
$87,239 
Manufacturing 


(computer) 
$110,385 


Telecommunications 
$91,037 


Computer 
services/consulting 
$73,563 
Government 
$72,776 


Legal/insurance/ 
real estate 
$79,425 


Banking 
$66,576 
Computer 
services/consulting 
$60,655 
Energy/utilities 
$74,280 
Government 
$58,563 


Finance/accounting 
$72,618 
Legal/insurance/ 
real estate 
$62,046 


Health care 
$59,703 


Manufacturing 
(noncomputer) 
$63,716 


Banking 
$82,654 
Computer 
services/consulting 
$82,576 
Education 
$60,998 
Energy/utilities 
$78,152 


Government 
$73,419 


Finance/accounting 
$82,722 
Legal/insurance/ 
real estate 
$77,259 


Health care 
$74,068 


Manufacturing 
(noncomputer) 
$77,041 


A Sampling of Average Total Compensation by Company Revenue 


Less than $100M 
$76,282 


$IOOM to $999.9M 
$82,121 


SIB to $10B 
$79,486 


More than $10B 
$84,291 


Less than $100M 
$56,458 


$100M to $999.9M 
$66,875 


SIB to $10B 
$72,453 


More than $10B 
$74,374 


Less than $100M 
$82,900 


$100M to $999.9M 
$95,553 


$1B to $10B 
$103,351 


More than $10B 
$107,070 


Less than $100M 
$65,306 


$IO0M to $999.9M 


$74,151 


$1B to $10B 
$77,372 


More than $10B 
$91,457 


Less than $100M 
$58,187 


SIOOM to $999.9M 
$63,715 


$IB to $10B 
$67,730 


More than $10B 
$68,838 


Less than $100M 
$76,408 


$IO0M to $999.9M 
$79,105 


$IB to $10B 
$79,840 


More than $10B 
$87,679 


Average salary 
$40,763 


Bonus 
$2,233 


Total 
$42,996 


2002 Total 
$44,224 


Computer 
services/consulting 
$47,868 


Education 
$36,881 
Government 
$40,668 
Legal/insurance/ 
real estate 
$44,474 
Health care 
$45,641 
Manufacturing 
(noncomputer) 
$40,228 
Telecommunications 
$54,334 


Less than $100M 
$37,176 


$IO0M to $999.9M 
$45,385 


SIB to $10B 
$50,322 


More than $10B 
$56,353 


Average salary 
$55,782 


Bonus 
$3,583 


Total 
$59,365 


2002 Total 
$58,468 


Computer 
services/consulting 
$64,622 
Education 
$40,511 
Government 
$58,664 
Legal/insurance/ 
real estate 
$66,796 
Health care 
$56,819 
Manufacturing 
(noncomputer) 
$53,505 


Less than $100M 
$54,031 


$I00M to $999.9M 
$59,895 


$IB to $10B 
$65,315 


More than $10B 
$77,062 


In at the total base for thi s particular industry or company size was fewer than 30 responses but more than 15. These figures should be used for comparison only, because they don't constitute a statistically significant sampling, 
Indicates that ase for this job title in th 


ntage change, 2002-2003 


survey. At the 95% confidence level, the 
margin of error for this sample size is 
plus/minus 0.80 percentage points. 

Respondents were asked to report 
the percentage change in their compen- 
sation from 2002 to 2003. Compensa- 
tion figures for 2002 were calculated 
based on the percentage change report- 
ed by the respondents. 

For a detailed look at how we con- 
ducted this survey, visit our Web site: 
www.computerworld.com 
@ QuickLink 41594 


Methodology 


Computerworld’s 17th Annual Salary 
Survey was administered via the Inter- 
net. Both Computerworld print sub- 
scribers and visitors to Computer- 
world.com were included in the survey. 
The collection of survey data began 
May 19 and was concluded July 18. A 
total of 16,519 people responded to the 
survey. Of these respondents, 14,984 
were employed full or part time and 
were eligible to complete the entire 


cal positions. Five percent said they were 
employed as contractors or consultants. The 
most well-represented industry was comput- 
er services/consulting, with 20% saying 
they worked in that field. Eighty-three per- 
cent have been in their current positions for 
an average of four years. 

More than a quarter (26%) of the respon- 
dents said they hail from the North Central 
U.S., making it the most well-represented 
geographic region, followed by the South At- 
lantic (19%) and Pacific (15%) U.S. 


WHO THEY ARE: 


Eighty-two percent of the respondents 
were men, 90% were employed full time, 
and 70% had a bachelor's degree or higher. 
The respondents had an average of 13 years 
in IT, and their average age was 39. Forty- 
four percent indicated that they have some 
level of certification. 

Thirty-nine percent of our respondents 
indicated that they were in management, 
whereas 61% said they held staff or techni- 
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| el ig At COMDEX, you’ll see all 
depends on tecnnology, the coiens side- by-side in a single vendor-neutral 
Even as IT budgets are shrinking, your company relies environment. Top-tier conference sessions, tutorials, 
on you to solve problems, to keep systems running, keynotes, and Innovation Centers will show you how to 
and to incorporate new technologies. And the best make the latest in IT relevant to your business needs. 
solutions are open to debate— build vs. buy, open 
source vs. proprietary technology, .NET vs. J2EE, the 
promise and hype of on-demand computing. 


Ce Hear what’s coming 
next trom an elite lineup of speakers from Amazon.com, 
AT&T Wireless, Computer Associates, Hewlett-Packard, 
7 themes tnat are transforming Intel, Microsoft, Nokia, Siebel, Sun Microsystems, 

As new ideas and technologies arise throughout the Symantec, and more. Share ideas with industry 

IT industry, seven key themes have emerged that will visionaries, business leaders, and thousands of your 
change the way you do business: peers. And experience the vitality of an $870 billion 
industry being reborn. 


= Wireless and Mobility = Windows Platform Hicit COMNEY 
= The Digital Enterprise | = On-Demand Computing eat ree 
= Web Services ® Security 

= Open Source and Linux 


Las Vegas November 17-20, 2003 


TUR ed aces. e eee 


GO TO COMDEX:COM COMDEX 


Use Priority Code: ADAEZ1NC LAS VEGAS 2003 
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I.T. Professionals 


Earn Your Master’s Degree Online! 


M.S. Degrees 
Available in: 

* Network Security 

* Computer Science 

* Electrical Engineering 

* Information Architecture 

* Information & Telecommunications 
Systems Management 

* Business Administration (MBA) 


888-522-7486 (x3026) www.capitol-college.edu 


Reach Respected IT Leaders in 


COMPUTERWORLD 
Marketplace Advertising Section 


The Computerworld Marketplace advertising section 
reaches more than 1.8 million IT decision makers every 
week. Marketplace advertising helps Computerworld 
readers compare prices, search for the best values, 
locate new suppliers and find new products and services 


for their IT needs. 


To advertise, call 212-655-5111 
or email print@ven.com 





Consulting Engineer sought by 
Maloy Research, Inc., to deter- 
mine software architecture and 
software frameworks to be 
applied in the development of 
Java based mobile communica- 
tions devises using WebSphere 
and Jboss Application server 
and Model View Controller pat- 
tern. Must work with micro-elec- 
tronics and embedded con- 
trollers to custom design solu- 
tions for clients. Must evaluate 
reference hardware platforms 
determine custom software 
application requirements of 
clients and coordinate develop- 
ment effort with software devel- 
opment team. Must have a 
Bachelors degree majoring in 
Power Electronics engineering 
or computer science engineer- 
ing. 8:00 AM to 5:00 PM at 
$60,000/year. Send resume to 
HR Department Maloy 
Research, Inc., P.O. Box 810 
Uniontown, OH 44685 


Oracle Clinical 
Database Administrator 


Application and DBA support for 
various applications in distrib- 
uted environment. Oracle DBA 
support on UNIX, Windows NT 
and VAX_VMS. Production sup- 
port, backup/recovery strate- 
gies, performance tuning and 
developmental support. Design 
and implement local and global 
standards. Manage complex 
patient database systems run- 
ning on Oracle Clinical, and 
implement using Oracle's sym- 
metric replication technology for 
global deployment. Req. 6 yrs 
prev exp, 2 of which must be in 
Oracle Clinical. Send resume to 
BLC Consulting Human 
Resources, 26 Jefferson Court 
Wethersfield, CT 06109 


System Architect, R&D - sought 
by NJ-based Int'l Logistics & 
Freight F/wdg Co. for job loc. in 
Naugatuck, CT. Req'd to resrch 
dsgn, dvip & test oper. sys spe- 
cific to USCO Lgsts. & in compl 
w/corp IT reqmts. Must have 
Master's Deg (or equiv) in IT or 
Comp. Sc or any Engg field & 2 
yts exp in job offd or 2 yrs exp 
as Sys Mgr or Sys. Anlyst. Must 
be exp'd in Java (J2EE 
Serviets, JavaBeans, Java 
Design Patterns) & XML. Ability 
to work in global environ 
Supvse 3. Send resumes to 
Human Resources-MB, USCO 
Logistics, Inc. 22 Spencer St., 
Naugatuck, CT 06770 


Saisha Tech & Circuits 
International, a certified minori- 
ty-owned business enterprise, is 
looking for Sales Engineer with 
direct account responsibility, 
selling custom manufactured 
electronic components. Must 
have BS with exp. in tariff calcu- 
lations Please apply at 
tearn@stacilc.com 


CDI, one of the largest staffing 
companies has multiple 
IT/Engineer _ positions We 
require BS/MS or equivalent 
with exp. in the related fields 
Good reference also required 
We offer competitive salary with 
full benefit package. Please visit 
www.cdicorp.com to find posi- 
tions 


Software Engineers needed 
Seeking qual. candidates pos- 
sessing BS or equiv. and/or rel 
work exp. Part of the req. rel 
work exp. must include 1 yr. 
working w/ Visual Studio.NET & 
Powerbuilder, and 2 yrs. working 
w/ SQL Server (exp. can be 
combined) Duties include 
Design, develop, maintain com- 
puter app. & databases; imple- 
ment software systems 
Troubleshoot & debug systems 
Work w/ SQL Server, Visual 
Studio.NET, Coldfusion, & 
Powerbuilder.Send res., ref. & 
sal. req. to DMC West Inc., 414 
T St SE, Tumwater, WA 98501 


CwWo31027E/W/MW.1 


IT|careers.com 


IT PROFESSIONALS 


Senior Consultant 
Responsible for integration test- 
ing for Enabler and Ensemble in 
the areas of Product Catalog 
Price Plan, Rater/AGF/MPS 
and Billing. Plan and implement 
the rollout of an order entry and 
provisioning system for the 
Indirect Sales Channel. Lead 
teams to ensure successful sys- 
tems implementation utilizing 
ASP, HTML, JAVA Script, Visual 
Basic Script, and Oracle DB 
Develop test plans and test 
scripts and lead teams for effi- 
cient testing and defect resolu- 
tion. Responsible for gathering 
system requirements, applying 
business requirements to sys- 
tem requirements and identify- 
ing process gaps in the in pro- 
duction support process. Identify 
key business processes to be 
impacted by the new system in 
the area of Billing, Customer 
Care, Sales, Price Plans 
Collections and design post- 
launch Production Support 
processes. Produce quality 
deliverables to supplement the 
reporting needs of the project. 
Utilizing SQL queries and Excel 
Macros produce necessary 
reports in an effective process 
minimizing manual intervention. 
Provide required training for 
post implementation support 
Manage defect tracking and 
reporting using Mercury 
Interactive Test Director tool 
The wage offered is $63,390. 
The work schedule is Monday to 
Friday 9:00am to 5:00pm. The 
Minimum Requirements are as 
follows: Bachelor's degree or 
equivalent in Computer Science 
Engineering (any type), Math 
Information Systems or 
Business Administration + 3 
years exp. in the job offered or 3 
years exp. as a Systems Analyst 
or Consultant Employer will 
regard a foreign degree to be 
equivalent to a U.S. Bachelor's 
degree as determined by an 
accredited credential evaluation 
service. In addition, must have 
at least 6 months of experience 
utilizing: ASP, SQL, HTML, Java 
Script, Visual Basic Script 
Oracle DB, and Enabler and 
Mercury Interactive Test Director 
tool and at least 2 years of expe- 
rience utilizing Ensemble 


Please send your resume, refer- 
encing Job Order Number 
WEB366859 to: 

Team PA Careerlink 

B.E.C.S 

444 N 3rd St., 3rd Floor 
Philadelphia, PA 19123 


Software Engineer - Architect. 
plan & configure DSS tools 
(Siebel Analytics, Microstrategy 
& informatica). Should be able 
to gather business requirements 
from clients. Responsible for 
architecting, installing, configur- 
ing and testing Siebel Analytics 
& informatica in Oracle environ- 
ment. Should have hands-on 
experience working with 
Administration tool, designer 
and web catalogues. 2 years 
experience on the job with a 
Master's Degree in. Science/ 
Math/Computer/Engg/Managem 
ent.Location: Deerfield Beach 
Shiva Systems 5749 Camino 
Del Sol Unit 206 Boca Raton FL 
33433 


Senior Web Developer: Design 
and implement versions of med- 
ical management automation 
software. Develop desktop ver- 
sions using VB and Access 
Develop Web and PDA versions 
using J2EE (EJB/JSP). Req 
uires B.S in Electrical 
Engineering. Must have hands 
on knowledge of J2EE (EJB/ 
JSP), MS SQL Server, Access 
and VB. 40hrs/wk (8:00 A.M. to 
5:00 P.M.); $58,000.00/yr. Send 
two \esumes/responses to 
Case Number 200203053, 
Labor Exchange Office, 19 
Staniford Street, 1st Floor, 
Boston, MA 02114 


IT|\cCareers 


DATA. WIRELESS. NETWORK. 
YES, YOURE IN THE 
RIGHT NEIGHBORHOOD. 
WE LIVE WHERE YOU LIVE. 


7 


= 


What can a company like State Farm* possibly offer in t 
of the nation’s largest computer networks. The 


And a wealth of 1-T. opportunities. How d 


STATE FARM 
INSURANCE 
For more information, visit statefarm.com* or email jobopps.corpsouth@statefarn 


State Farm * Home Offices: Bloomington, Illinois * An Equal Opportunity Employer 
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GUI Component Engineer 


ockset Engineer 


] 


Product Developer 


Ore aL | 1 riace GUI) d new feature 
The aforementioned positions are available at 


all levels and require a minimum of a B.S., 
M.S., or Ph.D. and 0-8 years’ experience. 


Additional Opportunities in the Following Areas: 
Senior Installer Engineer 
* Senior Manager, Comp, Benefits, & HRIS 


¢ MATLAB- Senior Software Engineer 


¢ Business Intelligence Analyst 

For fastest consideration interested 
candidates should reply via our website: 
http://www.mathworks.com/jobs 

Attn: Human Resources - Job Code: CW1003, 
The MathWorks, Three Apple Hill Drive, 
Natick, MA 01760-2098. 


www.mathworks.com 


Senior Software Engineer: Work 
in the company's mixed signal 
test language integrated devel- 
opment environment test sys- 
tems software department 
Design and build production 
software infrastructure for mixed 
signal test systems. Analyze 
customer requirements and 
devise solutions to increase sys- 
tem productivity and units per 
hour tested. Extend language 
processor for the system 
Enhance existing system and 
create new debugging tools and 
display software for mixed signal 
test language development envi 
ronment. Work extensively with 
C/C++, LEX and YACC on Unix 
Will use experience in system 
software development dealing 
with system hardware 
Requirements include a 
Bachelor's degree or equivalent 
in Computer Science, an 
Engineering discipline or closely 
related field and five years of 
work experience in the job 
offered or reiated field of soft- 
ware development using C/C++ 
on UNIX platform. Applicants 
must have unrestricted autho- 
rization to work in the United 
States. Salary $87,991/year. 40 
hours/wk. Respond with two 
copies of resume to Case 
#200203202, Labor Exchange 
Office, 19 Staniford St., 1st FI., 
Boston, MA 02114 


Sr SAP Basis Consultant 
(Project Manager)/Co headquar- 
tered in Philadelphia/Will work at 
client sites in PA and throughout 
the US: Works w/DBA & Basis 
teams on installing and support- 
ing activities of SAP on OS/390 
DB2 platform. Responsible for 
BASIS Administration of SAP 
R/3 Implementation SAP 
Security, performance monitor- 
ing & tuning, SAP Database 
administration, programming in 
ABAP/4, applying OSS notes 
profile generators, etc. Supports 
& trouble shoots w/SAP on 
OS/390 DB2 platform. Travels to 
client sites throughout US on 
long & short term basis. Works 
nights, weekends & holidays as 
required, especially for on call 
support. Supervises & manages 
SAP projects & teams of SAP 
consultants. Trains other SAP 
consultants to perform above 
duties. 40+hrs per wk; c. 10hrs 
OT, varies; 9am-5pm, some. 
times until 7pm/also weekends 
for on call support; $88/hr. 
Masters or equivalent education 
or experience and 2 yrs exp as' 
Sr SAP Basis Consultant 
(Project Mgr) or 2 yrs as 
Software Engineer/SAP Basis 
Administrator. Submit resume to 
Career Link Philadelphia 
Downtown Job Center 
Washington Ave, Phila, 
19147-3898. Refer to Job Order 
# WEB361879 


IT PROFESSIONALS 


Network Product Engineer 
sResponsible for assessing 
existing data networking and 
telecommunication _infrastruc- 
ture, utilizing extensive experi- 
ence in Voice and Data 
Communication architectures 
utilizing Cisco and other net- 
working equipment vendors 
Responsible for defining a for- 
ward-looking data networking 
and telecommunication strategy 
to encompass voice and data 
communications, utilizing expe- 
rience with WAN (Wide Area 
Network) strategy development. 
Apply CCNA (Cisco Certified 
Network Associate) certification 
to install, configure, develop and 
operate Voice and Data net- 
working technologies such as 
LAN (Local Area Network) 
Switching, WAN Routing, Circuit 
Provisioning Qos IP 
SoftSwitches, Security, Wire- 
less, ATM Frame Relay and 
MPLS (Multi Protocol Label 
Switching), Voice Over IP, and 
IP-VPN (Virtual Private 
Network). Assist with procure- 
ment and sourcing of data net- 
working and telecommunication 
services by interfacing with 
equipment vendors and carriers 
utilizing experience in network 
procurement and dealing with 
both equipment providers as 
well as network — service 
providers from a sourcing per- 
spective. Develop training mate- 
rials and detailed documentation 
for knowledge transfer to appro- 
priate operations personnel. The 
wage offered is $84,660/year 
The work schedule is Monday- 
Friday 9:00am-5:00pm. The 
minimum requirements are as 
follows: Bachelor's degree in 
Comp Science Electrical 
Engineering, Telecommunica- 
tions, Mathematics, Information 
Technology, Business Admin- 
istration + 3 years experience in 
the job offered or 3 years experi- 
ence as a Network Product 
Engineer. Related experience 
must also include Certification of 
CCNA (Cisco Certified Network 
Associate), Switching Funda- 
mentals, TCP/IP, Routing 
Basics, WAN Technologies 
Wireless Technology, Operating 
and Configuring Cisco IOS 
Devices 


Please send your resume, refer- 
encing Job Order Number 
WEB367014 to the 

Team PA Careerlink 

B.E.C.S 

444 N.3rd St., 3rd Floor 
Philadelphia, PA 19123 


Infobahn Technologies has 
immediate full time openings (2 
positions) for Programmer: 
Analyst to design, develop & 
implement Oracle Technical 
Applications using Orcale Apps 
(11i, 11.0.2,10.7,11.0.3, 8.0.5) & 
Modules (AP, AR, GL, OM, OE 
INV, iProcurement, Workflow 
Builder, Purchasing, Contracts & 
Services, AOL) & exp with tools 
such as Discoverer 3.1, iStore 
Forms 4,5,6i, Reports 2.5, 6i 
PL/SQL & Datamodelling exp 
Req BS in Comp. Sci. Engg/Rel 
field with 2 yrs exp. Send 
resumes to Infobahn 
Technologies, (HR) 288 Walnut 
St. #410 Newton, MA 02460 


PROGRAMMER ANALYSTS for 
Lincoln, NE office. Develop soft- 
ware applications using VB 
Oracle, XML, UML, Interwoven 
Coolgen, MQ-series, MTS, SQL 
server. Bachelors Degree or 
equivalent reqrd in Computers. 
Engineering or related field + 
2yrs of related exp. 40 hrs/wk 
Must have legal authority to 
work permanently in the U.S 
Send resume to HR Manager, 
Infocross, Inc. 1823 Hartley St, 
Lincoin, NE 68521 


IT|careers.com 


Exec Search, Inc. a technology- 
consulting firm in Wisconsin has 
multiple IT positions around the 
country w/ exp in one or more 
(depending on need) of the fol- 
lowing — skills: WebMethods 
Integration Server, WebMethods 
Trading Networks, WebMethods 
Enterprise Server, IBM 
MQSeries, IBM Assembler, IBM 
WebSphere, Mainframes, CICS. 
DB2, COBOL, Unix, Sun 
Solaris, Windows, C/C++, Visual 
C++, VB, VB NET, SAP, IIS 
Visual Source Safe, Power 
Builder, Designer 2000 
Developer 2000, Oracle, Oracle 
Application, SQL Server, MS 
Access, SQL, SQL Plus. 
PL/SQL, Data warehousing 
Tools, HTML, DHTML, XML 
TCP/IP, Perl, JSP, Weblogic, 
Java, Java Script, VB Script. 
ASP, ASP.NET, Clarify, 
Documentum, CoreDossierX 
Rational Rose, Testing tools and 
QA methodologies. Some posi- 
tions req. Bachelor's degree oth- 
ers Master's in Computer 
Science or in a related field, or 
its equivalent as well as relevant 
IT exp. Relocation may be nec- 
essary for most jobs. Send 
resume to Exec Search, Inc., 
C/O ISS, 1300 Bent Creek Bivd 
Ste. 200, Mechanicsburg, PA 
17050 


COMPUTER PROFESSIONALS 


Opportunities for 

* PROCESS CAPABILITY 
ANALYST 

* QC ANALYST 

* WEB ARCHITECTS: 

DEVELOPERS 

SYSTEMS ANALYSTS 

WEB GRAPHIC DESIGNERS 
NETWORK ENGINEERS 
PROGRAMMER/ANALYSTS 

* SOFTWARE ENGINEERS 


SKILLS 

* COLD FUSION * SPECTRA 

+ ORACLE + VISUAL BASIC 

* VISUAL C++ » SIEBEL * ASP 
+ COM, DCOM * JSP * HTML 

+ JAVA, JAVA BEAN + EJB JAVA 
SERVLETS » WEBSPHERE 

+ IBM MQ SERIES + XML,UML 
+ MTS + CLARIFY » PERL 

+ OBJECTPERL * SPYPERL 

* SMALLTALK * PL/SQL 

+ VISUAL AGE + COBOL, SPL 
UNIX 


Visit our website @ 
www.computerhorizons.com 


Attractive salaries and benefits. 
Please forward your resume to 
H.R. Mgr., Computer Horizons 
Corp., 49 Old Bloomfield 
Avenue, Mountain Lakes, New 
Jersey 07046-1495. Call 
973-299-4000. E-mail: jobs@ 
computerhorizons.com. An 


Equal Opportunity Employer M/F. 


Computers-Software Engineers 
needed. Candidates must pos- 
sess BS or equiv. and/or rel 
work exp. Duties include 
Extract data from disparate POS 
systems; Design database & 
upload components to analyze 
the extracted data; Work with 
Visual Basic, ASP, Javascript & 
Transact SQL. Knowledge of 
hospitality industries & cabilty to 
work with multiple databases 
preferred. Fwd. resume & ref. to 
Managed Data Group, LLC 
Attn: HR, 1843 Spring Garden 
St., Greensboro, NC 27403 


K Kama Consulting Inc. 


TOP $$’s, W2 or 1099 


We are a fast growing 
Consulting company based 
in North Carolina 
Excellent opportunities for 
Programmers, 
Systems Analysts, DBAs 


Sun Solaris System Admins, 
Mercatur, Websphere, 
ASP, .NET, ORACLE, 
PROGRESS, C++, TCP/IP, 
Delphi/VB, Windows NT 


Send your resume to 
Rod McFadden 
Kama Consulting 
Fax: 704-896-9660 
Email: rod@kamaco.com 


Chief Operating Officer. 
U.S.subsidiary of Israeli desktop 
marketing and technology solu- 
tions company seeks COO to 
direct multinational software 
development operations in 
Israel and the United States. 
Responsibilities include: direct 
strategic planning and the devel- 
opment and implementation of 
marketing strategies, including 
the development and launch of 
new products and services 
direct quality assurance man- 
agement, R&D, inventory con 
trol, human resources and cus- 
tomer distribution operations 
Direct operational managers in 
Israel and the U.S.; report 
directly to Israeli Board. Must 
have a Bachelor's degree or for- 
eign equiv. and at least 2.5 
years of experience as an 
Account Manager in the desk- 
top marketing industry. Frequent 
travel to Israel required. Email 
application to: Fiona Walsh, HR 
Manager, Fiona@cydoor.com 
Specify “Application” in subject 
line of email 
Technologies, Inc., 

29th St Suite 

NYC, NY10001 


Programmer Analyst. Sought by 
Englewood Colorado consulting 
company to work in various 
unanticipated locations through- 
out the U.S. Under direct super- 
vision, analyze, plan, develop, 
test and document computer 
programs including network 
communication programs 
Evaluate user requests and soft- 
ware program requirements for 
new and modified programs 
Write specifications, code, test 
and debug computer programs 
Use of C, C++, Java, SQL, DB2 
Oracle, JSP, HTML, HTTP, 
COM, SQL, XML and Windows 
NT. Reqs. Bachelor or equiva- 
lent in Computer Science 
Computer Engineering, Physics 
Mathematics or related degree 
Plus 1 year in the job offered or 
1 year in a related occupation 
including Software Technical 
Consultant or Systems Analyst 
Will accept 3 years of college 
education and 3 years of experi- 
ence in lieu of required educa- 
tion and experience. $60,000/ 
year, 40/hrs/wk, 8AM-5PM 
Respond by resume to WORK- 
FORCE DEVELOPMENT PRO- 
GRAMS, PO Box 46547, 
Denver, CO 80202, and refer to 
Job Order No. CO5058861 


Software Developer 

Siemens ITS Atlanta office 
seeks a Software Developer to 
design and develop distributed 
real-time system software for the 
transportation engineering 
industry to support dynamic real 
time traffic data for advanced 
traffic management systems 
Req. a Bachelor's degree in 
computer science or closely 
related field and proficiency in 
using C++, Java, SQL and dis- 
tributed systems architectures, 
and basic knowledge of SNMP 
and NTCIP. Fax resume to 
Walter Townsend at 770-814- 
5180. For more information, visit 
www.itssiemens.com. Job Code: 
TN-001 


Sr. Programmer/Analyst, Wash- 
ington, DC. To design, develop, 
enhance, implement, debug and 
maintain IVR/AVR applications 
in voice/data integration and net- 
work infrastructure based on 
VoiceXML including Nuance/ 
Speechworks and TTS; Java 
applications server; MySQL 
Oracle, Dell PowerVault Series, 
Linux and Windows; Dialogic, 
NMS and EV1/ISDN; and 
Gateways-H323 and SIP. Reqd 
M.S. in Computer Networks & 
Communications & 2 yrs exp. 
M-F, 40hrs/wk. Send resume to 
Ss Arsenyev, EastBanc 
Technologies LLC Ref. 
#99V,3307 M Street, N.W., Suite 
200, Washington, DC 20007 
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Programmer Analyst 

Responsible for developing, apply- 
ing and maintaining quality stan- 
dards for software applications 
Develop and execute Automated 
Software test plans, extensively uti- 
lizing Mercury Interactive 
WinRunner, LoadRunner, Test 
Director. Analyze and write test 
standards and procedures.Maintain 
documentation of test results 
Bachelors Degree in Computer 
Science or relevant field with 4 
Years of work experience in related 
occupation 40 Hrs./Week 
$70,000/ annum. Must be willing to 
relocate to various una pated 
work locations throughout the USA 
every 4 to 10 months, employer 
paid. Must have proof of legal 
authority to work in the United 
States. Send your resumes to the 
lowa Workforce Center, 215 
Watson Powell Jr. Way, #100, Des 
Moines, lowa 50309-1727. Please 
refer to Job Order 1A1101805 
Employer paid advertisement 


Database Programmer: Design. 
develop, and maintain a propri- 
etary client-server database 
application that provides central 
ized control of bug, knowledge 
customer support, and sales 
databases using Visual Basic 
MTS, and SQL Server. Design 
develop, and maintain e-com- 
merce site for U.S., Europ: 
and Japanese market using 
Visual Basic, SQL stored proce- 
dures, HTML, and JavaScript 
Design, setup, and administer 
SQL Server database and 
Internet Information Server. 40 
HPW, M-F. Requires bachelors 
in computer science or engi 
neering plus 1 yr. exp. as data- 
base programmer or application 
developer/related position 
$51,563/yr. Resume to Jorge 
Miranda, VP Product Support & 
Maintenance, ACD Systems of 
America, Inc., 1150 NW 72 Ave 
Miami, FL 33126, (305) 596- 
5644 


COMPUTER 

Technosoft Corporation has 
multiple 
Programmer/Analysts 
Software Engineers, Project 
Leads/Managers with skills in 
Java, Per, Siebel, Oracle 
Informix DBA, GUI, Java C++ 
CRM Applications, ERP & 
Dataware-housing Send 
resume to: 1250 Oakmead 
Parkway, Suite 210 
Sunnyvale, CA 94085 or 
email to 
jobs@technosoft-corp.com 
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Information Technology Support 
Specialist sought by real estate 
investment trust company in 
Englewood, CO to work in 
Englewood and other unantici- 
pated job sites in the U.S. to 
resolve problems with propri- 
etary software applications 
LAN, WAN and _ hardware 
Contact appropriate outside 
vendor to resolve problems as 
needed. Consult with network 
infrastructure team and local 
phone carriers to troubleshoot 
line and network problems 
Design LAN, configure LAN and 
oversee installation at remote 
sites. Expand network including 
laying cable, redesigning net- 
works and implementing con- 
nectivity. Complete reconfigura- 
tion and system updates of 
hardware and software. Build 
and configure servers. Utilize 
Citrix network system and Telnet 
in resolving computer problems 
Setup and maintain telecommu- 
nications system. Provide desk- 
top support for computer users 
utilizing remote assistance pro- 
gram as needed. Requires 
bachelor's in Information 
Systems Management; working 
knowledge of remote assistance 
programs, Telnet, WAN and LAN 
protocols, network design and 
server configuration. (Working 
knowledge may be gained in an 
academic or work setting.)M-F 
8am-5pm; $41,850/yr. Respond 
by resume to Empioyment 
Programs, PO Box 46547 
Denver, CO 80202 and respond 
to JON CO5059647 


Planning 
figuration, and i 
Various UNIX 
Conceptualize Design 
Test, Implement and Optimize infra 
structure stems Develop 
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env ts. Create applica: 
program interfaces and Network 
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y, Integrity and Business con- 
ntrols and documents, pr 
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Employer paid advertiser 


NetSoft has openings for IT pro- 
fessionals. Skills in COBOL II 
CICS, MVS, JCL, VSAM & DB2 
HTML, Java, PWB, IIS, JDBC 
ASP, JavaScript, XML, C/C++ 
Oracle preferred. Applicants 
must have BS/MS or equivalent 
Travel ma required. Apply at 
jobs@nstc.net. EOE 


Pictures Inc. (Anivision America) 
is ooking for System 
Programmer Analyst to design 
animation using XP, ME, 9X 
UNIX, Novell Netware. Applicant 
must have Bachelor with exp. in 
Oracle, Novell. We offer compet- 
itive wage, standard benefits 
Please contact 
joanne@sunwoo.com 


Software Engineer 

Provide technical support to 
existing systems. In addition 
design, develop, code, unit test 
and debug Annuities/Insurance 
based financial systems and 
applications utilizing Progress 
4GL (GUland CHU!), ADM and 
appserver technology. Must 
have Bachelors Degree or for- 
eign equiv. in CS or related field 
& 2 yrs. exp. or 2 yrs. exp. ina 
related position w/ability to use 
VPAS and Progress. 40.0 
hrs./wk 9:00 AM - 6:00 PM Send 
cover letter and resume to 
McCamish Systems, LLC, 6425 
Powers Ferry Road, 3rd Floor. 
Atlanta, GA 30339, Attn: HR 
Manager 


IT PROFESSIONALS 


Senior Consultant 
Evaluate & analyze business 
Process requirements, define 
systems strategy, develop sys- 
tems requirements, design, pro- 
totype & implement business 
solutions, & define support pro- 
cedures. Perform detailed analy- 
sis & effective diagnosis, and 
propose tions to client busi- 
ness chnology 
issues with Application 
Time Sheet TS) configura- 
PM 
iementing 
Time Evaluation including the 
develo; t of user enhance- 
ments for Quota generation 
mplement Work 
Schedules Absences & 
Attendances and automatic 
Quota Accruals utilizing SAP 
hema and per- 
sonnel calculation rules 
Evaluation f nion 
Union employees 
work and non-work t 
time, holiday 
hours to time 
wage types 


WAGE: $98,850/year 
Hours worked: Monday-Friday 
9:00am m 


MINIMUM REQUIREMENTS: 

Bachelor's degree in Computer 
Science, Enginee any type) 
Aath, Business Administration 
or Informa 5 
years exp. in the j ffered or 5 
years exp as a_ Senior 
Consultant, SAP HR Consultant 
Consultant, System Analyst 
Database Analyst Related 
experience must include SAP 
HR and at least 6 months in 
Cross Application Time Sheet 
(CA-TS) configurat 
gration to PS, PM and FI/CO) 


Systems + 


with inte- 


Please send your resume, refer- 
rder Number 


Team PA 
BE.CS 
444 N.3rd St 


Philadelphia, PA 


Programmer/Analyst, Delphi to 
program, analyz t, trou- 
bleshoot, and develop Delphi 
software as a front end for use in 
multiple RDBM (such as Foxpro 
Oracle, In nd Sybase) 
legacy in t systems 
nstalled in a ted client 
server envir 2nt including 
implementa an intra/inter- 
net enviro it. May use tools 
such as MIDAS, SOAP, COM 
DCOM Pascal, ASP. 
ADO, XN .ogic Server or 
Web Services, T-SQL, DLL 
Reports, lS 

equired in p 
juties Requires 


Computer 


field and 
ence. Wo 
unanticipa’ 


resumes 0 


& upgrade Oracle ERP 

Reqs: BA/BS in 

stics 

2 yrs exp 

w/Oracle Apps or DB's. Send 
resumes salary req's 
to Attn: HR, IT Convergence. 
150 E. Gilman St., Suite B2200 
Madison Wi 53703 or 


resume@itconvergence.com 


eee B Keel es 


INFORMATION TECHNOLOGY 


Director, Financial Management System 
Responsible for planning for and leading the implementation 
of a new University Financial system, including components 
related to research administration and compliance. Past expe- 


rience in a university or similar highly decentralized environment 
is desirable, with career emphasis on planning, design and 
implementation of large, complex 


enterprise systems 


Excellent written and oral communications skills required. Bachelors 
degree in computer science, business, accounting or related field required, MBA 


preferred. Minimum 10 years of experience 


n 


professional information 


technology and financial system environment required. For a complete description, 
go to www.it.northwestern.edu 


Director, Technology Support Services 
Responsible for recruiting, enlisting, training, evaluating and managing the professional 
staff. Defines project scopes. Develops and mainta 
isfaction with the services offered. Consults with University divisions on appropriate 
new services. Bachelors degree required. Minimum 10 years of experience both as an 


end-user and administrator in two or more of 


support. Excellent oral and written communication skills. 


Project Manager, Financial Management System 
Assist in managing university wide financial management system replacement. Requires 


experience managing projects and staff with technical 
Background in financial systems, enterprise systems 
web-based self-service preferred Excelient written and o 


s unit budget. Measures sat 


computing and networking 


hands on involvement 


lational database, and 
al communications skills 


required. BS in Computer science or related field required. Minimum 5 years of 
experience in a professional information technology and financial system environment 


Experienced web developer with strong analystica 
JAVA/CGI Scripting, with web 
required(Oracle preferred). Familiarity with Dreamweaver, Photosh 


PeopleTools, HTML, 


Web Developer 


ons skills 


database 


nectivit 
ectivity 


yp, and IS 


desired. Bachelor’s degree in computer science or related field required. Minimum 3 


years in a professional information technology environment 


Customer service rep for voice/data plus products 


Service Analyst 


Consult 


w/customers, coordinate 


work orders with field ops. Basic programming knowledge of Nortel SL-100 switch 
and Octel voice mail system preferred. Microsoft Windows and Microsoft Office experience 
Excellent oral and written communication skills. Excellent customer service skills 
Degree preferred, telecom experience preferred 


We offer a competitive salary and excellent benefits 


NUIT JOBS 


Send Resumes tc 


Northwestern University, 1603 Orrington, Suite 900, Evanston, IL 60201. 
Email: nuit-jobs@northwestern.edu Fax: (847) 467-6500 


Visit our Web site at: www.northwestern.edu 


Northwestern University is an equal opportunity, affirmative action employer 


Members of historically underrepresented grou 


Software Engineers reqd by 
S/ware Dev. & Consit Co. Duties 
incl S/ware Systms dsgn, Object 
Oriented Analysis & Dsgn, using 
skill sets incl Java 2 erprise 
Edition Technologies XML 
XSLT/DTD/JAXB/JDOM API's 
Web applic dvipmt using Java 
Weblogic or iPlanet, Rationa 
Rose, Application Server Oracle. 
Http, Http Unit, Unix, Ant, JUnit 
OC4J, or SQL d/base server 
data prgmg 
Procedu 
model 
Erwin, !IS, Apache 
admin & maintenance 
cation load balancing & 
ration. Job loc: Chicag 
various unanticipated client sites 
n US, as assigned. Req 
Masters in either Math, or Sci, or 
or Engg, (any dispi 
an equivalency 
yr undergraduate 
¢ followed by 5 yrs o 
gressive exp in relevant field 
40 hrs/wk, 9a: M-F. Apply to 
CEO, Edge: 555 West 
Madison 


Chicago, It 


SOFTWARE ENGINEER 
APPLICATIONS wanted by 
wireless equipment sales & 
services co. in Houston, TX 
Must have Master's in 
Computer Science or MIS 
plus exp. Respond by 
resume only to: Mr. N 
Maaz, A/K - #10, CellMart 
Wireless Inc 7447 
Harwin, Ste. 107, Houston 
TX 77036 


requirements, fu 


field: experience design- 
ing and developing software 
applications ising Oracle 
RDBMS, Unix, Linux, Sun 
Solaris, J2EE, UML, EDI and 
OOT. Respond by resume to 
TransZap, 1580 Lincoln St 
Suite 930, Denver, CO 80203 
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ps are strongly encouraged to apply. 


Resume 


must reflect e 
be rejected 
Forward resume to Bi Staffing 


Center, PO Box 534, Waltham 


MA 02454. EOE 





Information Analyst 
onsible for the day to day sup- 
port and maintenance of cus 
tomer's proprietary product 
Develop, enhance and maintain 
the related systems including 
software development kits, run- 
time engines, compilers, debug, 
handle license mecha- 
Port middleware systems 
processing 
perating system 
l ompaq/HP Alpha 
architecture to the latest Intel 
Itanium architecture Test 
debug and certify on new releas- 
es. Answer user questions and 
respond and resolve user prob- 
ems estigate problems, fix 
the code and issue new product 
releases as appropriate. Ensure 
new hardware and operating 
stems updates ntinue to 
work on the new platforms 
through 
regression testing making prod 
uct updates when needed 
Utilities and tools environments 
include VMS debugger, dbx 
Microsoft Visual Studio and 
Visual Studio.Net, Oracle 7.3.2 
8.x, RDB, OpenVMS Journaling 
IS, Apache Web servers ir 
VMS, UNIX and Windows 
Requires Bachelor's degree ir 
Computer Science and 2 years 
experience in the job offered or 
2 years in software develop 


conformance and 


ment, enhancement and certifi- 
cation using multi-threaded pro 
gramming and _ client/server 
technology a cross platform 
environment including VMS 
Windows and UNIX, and ISO 
9001 standards. 40 hours per 
week, 8AM to 5PM, Monday to 
Friday. Salary $75. per year 
To apply, send two (2) copies of 
resume/letter of application to 
Job Order #2003-453, P.O. Box 
989, Concord, NH 03302-0989 


Database Administrator to 
logical and physical design 

acie database; Code test and 
implement Oracle scripts apply 
ing knowledge of Database 
Management Systems 
Calculate optimum values for 
Oracle database parameters 
performance tune Oracle data 
bases; Model Oracle database 
security; manage backup and 
recovery of Oracle databases 
make changes to Oracle data 
base applications using knowl- 
edge of Oracle 8i, C, Access 
Clarify and PowerBuilder 
Requirements Bachelor's 
Degree, educational or function 
al equivalent, in Computer 
Science or related field and two 
years experience as a DBA 
expertise in racie database 
administration which in Jes 
logical design, physical design 
performance tuning, backup and 
recovery, coding of scripts 
knowledge of Oracle 8i, C 
Access, Clarify and Power 
Buil Salary: $66,000/ year 
Working Conditions: 8:00 A.M 

5:00 P.M., 40 hours/week 
nvolves extensive travel and 
relocation Apply Fayette 
County CareerLink Attn 
CareerLink Program Supervisor 
135 Waylan Smith Drive 
Uniontown, PA 15401, Job No 
WEB367223 


Computer Prog’r/Analyst: design 
& dev cl. server/web apps, using 
Java, C++, VB, JSP, XML & 
Weblogic app svr. Study exist db 
systems, using Oracle, PL/SQL 
in UNIX. Analyze problems 
troubleshoot. BS in CS, MIS or 
any eng'g rel. 2 yrs. exp or 2 yrs. 
sys analysis/prog rei. Must have 
exp. using the above techs 
Multiple jobsites, may change to 
other sites throughout US as 
req Send res _ showing 
Job#:PA01 to Advansoft, 1807 
Carraige Ct, Addison, IL 60101 
Legal rt to work must be stated 


Maleate aS 


Intellysis Technology is a fast 
growing Chicago based IT con- 
sulting group with clients all over 
the USA in leading edge areas 
such as eCommerce, ERP, 
Automated Testing and Client 
Server MultiTier Systems 
Intellysis is looking for 
Programmer Analysts, System 
Analyst 
mmers, Software Developers 
and Project Managers with 
experience in one or more of the 


Computer Progra- 


Java/Java Web Server, Java 
Script 

VB, VB Script, ASP, Activex 
COM, DCOM 

CGI, Serviets, CORBA, Per 
VJit+ 

HTML, DHTML, XML 

JAVA APPLETS 

COLD FUSION, HTTP 
SEGUE/RADVIEW TOOLS 
Large Scale System 
Design/Architecture Testing 
Experience 


All jobs require a minimum of a 
Bachelors Degree or equivalent 
in Computer Science or related 
fields + 1yr. exp. reqd. depend- 
ing on positior 


Project Managers require a 
Masters in Business Admin- 
istration or its equivalent 
Frequent travel and/or reloca- 
tion. If you are interested in our 
company, please mail, fax or e- 
mail r resume including ref- 
erence number CW1003 to 
INTELLISYS TECHNOLOGY 
LLC., 600 Enterprise Dr, Ste 
208, Oak Brook, IL 60523; fax 
(630) 455-1333 


e-mail: recruit@7hillsys.com 


Web Developer 


Senior Web Developer designs 
develop, maintain proprietary 
web applications implementing 
HTML, Visual Basic, XML/XSL 
ASP, JavaScript and ADO 
Developer provides web based 
product support to clients, coor 
dinates with Weather Research 
Team to deliver real time, recon- 
structed worldwide weather data 
products. Developer also aids in 
delivery of loss estimates in real 
time during catastrophes 
Participates in architectural 
design of new web products 
Reqs Bachelor degree in com- 
puter design related field incl 
industrial or comp engineering + 

ars exp in web related work 

00 year. FT. 


Applicants respond to Case 
#20020292 Labor Exchange 
Office, 19 Staniford Street, 1st 
Fl., Boston MA 02114 


PROGRAMMER/ANALYST to 
analyze, design, develop and 
implement IVR applications on 
Nortel IVR-VPS/MPS platform 
using Peripro Peristudio 
Periview, Periproducer, Java, C 
JavaScript, MS SQL 
r, Access, VB, Oracle and 
Scripts Require 
or's degree (or equiva- 
in Computer Science, 
Information Systems, or a close- 
ly related field with 2 yrs of exp 
in the job offered or as an IVR 
Developer; Each 3 yrs of pro- 
gressively responsible work exp 
in the field will be considered 
equivalent to 1 yr of college edu 
cation. Extensive travel on 
assignment to various client 
sites within the U.S. is required 
Competitive salary offered 
Send resume to: Nagesh Ganta 
Management Decisions, Inc 
4940 Peachtree Industrial Biva 
Ste 310, Norcross, GA 30071 
Attn: Job PP. 


Pro oft 


PROSOFT TECHNOLOGY 
GROUP, INC. has immediate 
full-time multiple opportunities 
for experienced Programmers 
Programmer Analysts, Syst 
ems Analysts System 
Administrator, and Database 
Administrator with a Bachelor's 
degree and minimum of one 
year experience in any of the 
following:EAI/B2B Integration 
webMethods (Integration 
Server, Broker, Mainframe 
Integration Server, WorkFiow) 
SAP R/3 Functional Modules. 
ABAP/4, Basis, BW. EBP. 
SEM, CRM, SAP Business 
One, SAP Portals and SAP Net 
Weaver J2EE Technologies 
Web Logic and Web Sphere 
and iPlanet, XML, Web ser- 
vices frame work (SOAP) 
WSDL UDDI Microsoft 
NetFunctional & Technical 
experts in all modules of 
Peoplesoft and Oracle 

Applications Database Admin- 
istration - Oracle and SQL- 


} Enterprise Reporting, Actuate 


Crystal Reports Data 
WarehousingWe also accept 
the foreign edu. equ. All posi- 
tions require frequent travel 
and relocation throughout the 
U.S. Send confidential resumé 
and salary requirements to Ref 
# Pete - 2004 Attn: HR 
Manager Prosoft Technology 
Group, Inc., 2001 Butterfield 
Road, Suite 1050 Downers 
Grove, IL 60515 Visit our web- 
site at 

www.prosoftgroup.com 


Computer System Administrator 
various locations throughout the 
U.S. Install, configure, and sup 
port an organization's local or 
wide area network, or a segment 
of network system. Maintain net- 
work hardware and software 
Implement Disaster Recovery 
Solution to provi 
able storage area over a hetero- 
geneous SAN to multi-operating 
system. Monitor network to 
ensure network availability to all 
system users and perform nec 
essary maintenance to support 
network availability. Plan, coor- 
dinate, and implement network 
security measures. Must have 
B.S. or equiv. in engineering 
Must have 4 yrs exp in job 
described or 4 yr exp as a comp 
professional. Must have over 18 
months exp wiinstalling, config 
uring, maintaining, and trou- 
bleshooting servers & network 
ing hardware. Must have exp 
w/Sun enterprise servers, SUN 
Ultra workstations, Unix, and 
Cisco network products. Must 
have exp providing disaster 
recovery solutions. Position is 
40 hrs/wk from 8 to 5 w/yrly 
salary of $75,602. Send resume 
w/reference to Job Order #WEB 
366904 to Manager, Butler 
County CareerLink, Pullman 
Commerce Center. 112 
Hollywood Drive, Suite 101 
Butler, PA 16001-5699 


highly avail 


Senior 
Programmer Analysts 


We are looking for experienced 
programmers with the following 
skills: at least 2 years experi- 
ence with Microsoft VBscript 
HTML, Active X, Jscript and 
ASP/II, SQL Server, Crystal 
Reports, PL/SQL and Loan- 
Quest mandatory. A degree in 
Computer Science or Infor 
mation Technology is required 
Must have excellent communi- 
cation skills, both verbal and 
written. Excellent technical peer 
group to work with. Some travel 
may be required. For consider- 
ation, please fax your resume to 
(904) 356-1099 or e-mail to 
hr@MortgageFlex.com NO 
THIRD PARTY. For further info 
go to www.mortgageflex.com 


iT|careers.com 


RESEARCH 
Associate Research Data 
Analyst (Princeton, NJ). Req 
Bach. deg. or higher in 
Statistics, Mathematical Scie- 
nces, or Comp. Sci. Must have 
experience. coursework or train- 
ing in statistical data analysis 
using SAS, FORTRAN and 
PARSCALE; scaling and equat- 
ing of test data utilizing IRT; and 
application of logistic regression 
analysis. Participate in and con- 
sult on all phases of the design 
and development of medium- 
scale and complex research and 
development data analysis pro 
jects. Design and develop tech- 
nologies for executing medium- 
scale, complex research and 
development data analysis pro- 
jects. Engage in scaling and 
of test data applying 
1 Response Theory) 
Perform statistical data analysis 
using SAS, FORTRAN and 
PARSCALE. Design and imple- 
ment data analysis procedures 
through the application of logis- 
tic regression analysis 37.5 
hrs./wk. Apply with resume to: 
Kelly Abernathy-Porch, Educa- 
tional Testing Service, Rosedale 
Road, Princeton, New Jersey 
08541. EOE 


Opportunities for experienced 
Programmers Programmer 
Analysts, Systems Analysts 
Software Engineers, DBA's 
Web Developers and Software 
Consultants with two or more of 
the following skilis: ICS, DB2 
IMS, JCL, VS-COBOL, VSAM. 
Endeaver, CA-7, ISPF, TSO. 
SQL, MVS, Oracle8i, Developer 
2000, PL/SQL, Visual Basic 6 
ASP, IIS, OOD, EJB, JavaScript 
HTML, DHTML, XML, Front 
Page, Tomcat/Webserver, Shell 
scripting, Perl, PHP, AIX, LINUX 
TCP/IP, HTTP.UML, Config- 
uration Management Software. 
Segue Silktest, Test Quest 
Rational Rose, Java, J2EE 
Serviets, JSP, JAXP, JNI, C 
WebLogic WebSphere 
Rational Clear Case, Jtest 
Power Builder, Sybase. BS or 
MS degree reqd., depending on 
position. 1-2 yrs exp reqd 
2pending on position We also 
accept the foreign edu. equiv. of 
the degree, or the degree equiv. 
in edu. and exp. Frequent travel 
and relocation. Send confiden- 
tial resumé and salary require- 
ments to: MS Tech Services, Inc 
401 E. 8th Street Sioux Falls, SD 
57103 Visit our website at 
www.mstsinc.com 


Softline Systems, Inc is seeking 
qualified individuals to work at 
client sites throughout the 
United States. We have open- 
ings for the following positions 


Oracle Programmer Analyst to 
develop various applications. 
user interface and database pro- 
grams using Oracle, PL/SQL 
and SQL 


Data Warehouse Programmer 
Analyst to develop data ware- 
house and data marts using 
Business Objects, Oracle and 
PL/SQL 


Ab-Initio Programmer Analyst to 
develop data warehouse and 
data marts using Ab-Initio 
Oracle, SQL and PL/SQL 


Teradata Developer to develop 
Teradata databases 


Apply to: Softline Systems, Inc 
1600 Boston Providence 
Highway, Walpole, MA 02081 
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PeopleSoft’s CEO Says Oracle 
, Offer No Longer Seen as Threat 


Conway rebuts Ellison, promising to 


support PeopleSoft 7 


software ‘forever 





BY MARC L. SONGINI 
PeopleSoft Inc. last week re- 


| threat? That saga has been 
| over for two months. [Oracle 


ported a smaller-than-expected | CEO] Larry Ellison every 


loss of $7.3 million for the third 
quarter on revenue of 

$624 million. The 

Pleasanton, Calif.- 

based company said it 

would have been prof- 

itable if not for costs re- 

lated to its August ac- 
quisition of J.D. Ed- 

wards & Co. Craig Con- 

way, PeopleSoft’s presi- 

dent and CEO, spoke with 
Computerworld about the re- 
sults, PeopleSoft’s effort to fend 
off a hostile takeover bid by 
Oracle Corp. and other topics. 
Excerpts follow. 


Does PeopleSoft see Oracle’s 
takeover attempt as a viable 


Continued from page 1 


PeopleSoft _ 


PeopleSoft offers its flagship 
PeopleSoft Enterprise suite. 
Cargill has about 7,000 end 
users worldwide running gen- 
eral ledger and other financial 
applications in green-screen 
mode and would like to keep 
World going instead of paying 


for an upgrade, Gabby said. He 


added that Cargill officials are 
seeking the continued devel- 
opment of new software re- 
leases and bug fixes, as well as 
an effort by PeopleSoft to mar- 
ket World to new users so it’s 
not treated as just “an iSeries 
cash cow.” 

The IBM 5250 terminal user 
interface that World supports 
can process financial data 
more rapidly than the Web- 





week contacts Reuters, AP 
and Bloomberg and 
says, “You know, I’m 
still interested in ac- 
quiring PeopleSoft,” 
and they dutifully 
put it out on the wire 
instead of asking why 
{Oracle’s] application 
business has been 
at its lowest level 

since 1998. 

The story here is that Ora- 
cle has kept that pretty well 
camouflaged as they tried to 
convince the world this 
{takeover offer] is still in play, 
and no one is paying attention. 
It’s like an old movie that no 


| one is going to anymore. 


based screens included in the 
EnterpriseOne software, said 


| Julie Mauser, IT manager at 


the Cargill unit. “Green-screen 
works very nice in certain 
types of data entry,” she noted. 

Cargill isn’t alone. At this 
point, about 10 of the 20 com- 
panies that belong to the 
World Advisory Council have 
expressed interest in trying to 
create a groundswell of sup- 
port for more spending on 
World, said Bill Tritch, a 
Cargill product manager who 
is the council’s president. 

By year’s end, the advisory 
council plans to launch a sur- 
vey of companies running 
World to gather input that will 
be presented to PeopleSoft, 
said Dave Hyzy, director of IT 
at Benderson Development 
Co., a Buffalo, N-Y.-based real 
estate developer that uses 


Both Ellison and Oracle Executive 
Vice President Chuck Phillips have 
claimed that PeopleSoft users 
have approached them with ap- 


| provals of the offer. Is there any 
| validity to that? Have they 

| provided referenceable cus- 
| tomers? 


No. My gosh! I can’t believe 
that. That’s surprising. 


Did Oracle’s offer to support Peo- 
pleSoft 7 for at least 10 years lead 
to the changes in technical sup- 
port that you announced last 
month [QuickLink 41524]? We 
will support Version 7 forever. 
We're still offering technical 
support and bug fixes for Peo- 


| pleSoft 2. That was a great, 

| classic play on words by Larry, 

| implying we didn’t support 
PeopleSoft 7. What we did re- 


cently was expand the amount 


| of time you get upgrades and 


scripts and tax tables to make 


World’s financial modules. 
Hyzy acknowledged that 


| some companies “have grown 


fat and lazy with the idea of 


over and just want to keep go- 


| ing on indefinitely” with tech- 
| nology they already have in 


| place. But, he added, 


“IT don’t 
think that’s representative of 
World customers. Most of us 


| realize over time the product 
| has to grow or we're going to 
| have to do some- 


| thing else.” 


Hyzy said he 


In particular, 


would like to see 
PeopleSoft add an 
HTML interface 
and integrate 
World with IBM’s 


| WebSphere mid- 
| dleware so devel- 


opers could craft 


| and we 
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customer support even sweet- 
er. The core technical support 


| has been indefinite since the 
| beginning of time. 


| Do you have any comment about 


your third-quarter financial re- 
sults? We beat guidance by 7 
cents [per share] in earnings, 
and license revenue was way 
above the [predicted] range. 
The data speaks for itself. We 
had 175 brand-new, never- 
been-sold-to customers in the 


| third quarter. We had the aver- 


age transaction size sales price 


| increase, not decrease. Eleven 
| customers were cross-sell cus- 


tomers [with J.D. Edwards], 
haven’t trained the 
sales force in cross-selling yet. 


| SAP CEO Henning Kagermann 


said that because of the fallout 
from the Oracle/PeopleSoft fight, 
SAP was losing more deals than 


| before on the basis of cost. Are 


| Java applications that would 
| help streamline data work- 

| flows and electronic data in- 
| terchange transactions. 

not having to migrate anything | 


PeopleSoft acquired Den- 
ver-based J.D. Edwards in 
August and last month an- 
nounced an EnterpriseOne 


| upgrade that finally gives the 


6-year-old multiplatform soft- 
ware a functionality edge over 
World [QuickLink 41542]. 
Craig Conway, PeopleSoft’s 
president and 
CEO, said in an in- 
terview that World 
will remain “a 
third line of busi- 
ness” for the 
Pleasanton, Calif.- 
based company 
(see Q&A above). 
Conway agreed 
that PeopleSoft 
has an “absolute 
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you discounting prices? There 
was no more discounting than 
in any other quarter, and it’s 
been a buyer’s market, not a 
seller’s. I saw the remarks by 
Henning, and either they 
stand up to the math or don’t. 
We didn’t do any higher dis- 
counting. 


Do you now see SAP as your top 
competitor? SAP is the only 
company ahead of us. That’s 


| unlike even two years ago 


where, when you looked at the 
two companies, in some areas 
one would have what the oth- 
er doesn't. 


Some users are questioning Peo- 
pleSoft’s commitment to J.D. Ed- 
wards’ green-screen World prod- 
ucts and want to see that software 
maintained as a third line of busi- 
ness. It is a third line of busi- 
ness. And I think there’s an ab- 
solute desire for our AS/400 
customers to have enhance- 
ments and developments and 
innovations. The AS/400 prod- 


| uct is supported both in World 
| and EnterpriseOne. [But] most 


innovations are on the modern 


| architecture, EnterpriseOne. 


@ 42351 


desire” to see continued en- 
hancements to World as well 
as EnterpriseOne. But most 
development will be targeted 


| at the Web-based Enterprise- 


One line, he said, adding that 
World users can migrate with- 


| out paying new software li- 


cense fees. 
World has been updated 
with about 200 enhancements 


| annually over the past three 


years, said John Schiff, direc- 


| tor of product strategy for the 
| green-screen line. PeopleSoft 


plans to maintain a “very ac- 
tive engagement” with users 
of the software, he added. 


| Asked about the survey that’s 
| planned by the user advisory 
council, Schiff said, “We are 
| absolutely open to feedback 


and would look at the results 


| and see what priorities the 


@ 42316 


customers have.” 
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Com Rules 


TRATTON SCLAVOS, CEO of VeriSign, says his company 
didn’t intend to break anything on the Internet when it 
launched its Site Finder wild-card service [QuickLink 
41642]. In fact, Sclavos told me a few days ago, VeriSign 
spent months testing Site Finder. And it did conform to 
existing standards. And when Site Finder went live and some things 
broke, VeriSign went to work fixing them as quickly as possible. 
Do I believe him? Sure. But what matters more is that on Oct. 3, 
when the Internet Corporation for Assigned Names and Numbers 
unambiguously told VeriSign to pull the plug on Site Finder, the 


company complied. 


That was the right thing to do. Yes, it came 
after weeks of brinkmanship, with ICANN issu- 
ing advisories and responses and recommenda- 
tions about Site Finder, and VeriSign declining 
to reverse its changes to the way the Domain 
Name System worked, with the level of sound 
and fury rising daily. But when ICANN finally 
made a formal demand under its contract with 
VeriSign, VeriSign did the right thing. 

Now the question is whether ICANN and 
VeriSign will keep doing the right things. 

VeriSign needs to rebuild the trust that we 
all want to have in the company that controls a 
critical part of the Internet’s infrastructure — 
the .com root DNS servers. 

ICANN needs to successfully resolve the Site 
Finder dispute — and then set up rules and 
processes that will make this kind of dispute 
less likely to happen again. 

Sclavos says that’s what he wants. His compa- 
ny has invested a bundle in upgrading the sys- 
tem for delivering all those .com domain 
names. Now VeriSign needs to make money 
leveraging that investment. But to do that, 
Sclavos says he needs to know what 
the rules are. 

Even if those rules put the keeper 
of .com names on a shorter leash 
than, say, the people running minor- 
league top-level domains like .info 
or .biz? 

“I fully understand the argument 
that .com is different,” Sclavos told 
me. “If they want to be discrimina- 
tory toward .com and VeriSign, 
that’s fine — just give us the rule 
book by which we get to play in the 
market. But to have no rules, or to 
have those rules change on you as 





FRANK HAYES, Computer- 
world's senior news colum- 
nist, has covered IT for more 


than 20 years. Contact him at i EN ne ee 
ae broken again — and again, and 


you're trying to make investment and research- 
and-development decisions, is not commercial- 
ly reasonable.” 

If that’s really the case, then there’s an oppor- 
tunity here for both ICANN and VeriSign. 

Make those rules, guys. Hammer them out in- 
formally. Keep the legalisms and fear of loop- 
holes out of them. Be practical. Be brutally prag- 
matic about what will fly. But draft those rules. 

Sure, they'll be tentative. Yes, they’ll be off 
the official books. And before they become for- 
mal policy, they’ll have to go through ICANN’s 
full deliberative process. 

But they'll create a clear working understand- 
ing between ICANN and VeriSign. That means 
VeriSign gets the clarity it’s looking for, and 
ICANN gets the cooperation it needs. 

More than that, those rules will represent the 
model for a fast-track process at ICANN. That 
may not sit well with all ICANN constituencies 
— especially the people still smarting from 
VeriSign’s reluctance to ax Site Finder. 

Dealing with those concerns will require real 
leadership from ICANN — and maybe a few 
sacrifices from VeriSign, to show 
that it’s acting in good faith. But if 
it works, we'll have a new process 
for domain-name innovation — 
one that’s faster than ICANN’s full 
deliberative process and a lot more 
orderly than today’s try-it-and-see- 
if-anyone-objects approach. That 
will go a long way toward restoring 
credibility for both ICANN and 
VeriSign. 

Especially since the alternative 
may be watching the Internet get 


again. @ 42309 
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Think Again 

Database pilot fish is told that installation of the new 
production mainframe database software is complete, 
so he runs it through its paces for an hour. But when 
he returns after a break, it's not running. What hap- 
pened? he asks the operations manager. “Oh, we 
aren't going to run that all day,” manager tells him. “It 


uses too many resources.” 

cnet ae a 

first strikes, enough time to 

brags ata pea ~ Pcie it _— 
: aren 


list,” security 


: “{ can’t change it at all. | 
: don’t even try,” user 

; says. What do you mean, 
: you don’t try? fish press- 
? es. “I can’t change it. 

} I'm out of passwords,” 


: A Boombox 


: When a user decides he 
: needs a laptop to work 

: at home, IT pilot fish 

? helps him choose a good 
: one ~ though fish figures 
? this user will never use a 
: tenth of the laptop’s po- 
i tential. “It arrived on a 

: Friday,” says fish, “and | 
: gave him a quick over- 

? view about how to use it. 
: He seemed to get it, sur- 
: prisingly enough. But he 
: ing and tuned the laptop 
: to show me the left side 
: tapes won't fit in here.” 
: He was pointing at the 


FEED THE SHARK! Send your true tales of IT life to 

sharky@computerworld.com. You snag a snazzy 
Shark shirt if we use it. And check out the daily feed, browse 
the Sharkives and sign up for Shark Tank home delivery at 
computerworld.com/sharky. 
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